Kory Krofft wrote: > > Okay Scott and anyone else who has been following this thread, > Echowall works fantastic for IP forwarding to the varous game servers.
Nice to hear that it's working fine now!... :) It's very easy to set up and quite efficient. > In summary: You guys are awsome. In just a few days you solved what would have > been a very difficult problem for me. I thank you! I would still like to find a > novice friendly explanation of the ipchains and ipmasque syntax so in the future > I could work out similar problems on my own and feel like I am giving something > back. > > Thanks again, > Kory Krofft Well, you helped Scott fix something that hardly anyone would have noticed offhand.... :-) Syntax is always difficult without the help of some graphical overview, at times... http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO-4.html#ss4.1 In my mind chapter 4 is the punch line. When you grasp the picture of how the packets travel through the rules and what the rules decide with the packets' fate then everything starts to fall in place... Ipmasqadm is one of the tools for redirecting ports from the external interface, which is connected to the Net, to an internal server on a LAN, bypassing the basic ipmasquerade policy. A strict adherence to a typical ipmasquerade setup on a LAN would be quite restrictive to users on the internal network, that's why ip_masq_modules like quake, irc, icq, raudio and the like are usually inserted on the packet filter to "lighten up" this restrictive environment. But this can be security hazardous, too. It all depends on what sort of services are running on the network, along with important and sensitive data. Some system administrators won't even allow these sort of things to run on their systems, they could be too risky, simply because they could be compromized with these holes through the firewall. http://www.linuxdoc.org/HOWTO/IP-Masquerade-HOWTO-6.html#ss6.8 -- Patrick Benson Stockholm, Sweden _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
