/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
okay, first off, i'd like to say im fairly new to linux, so try not
to assume 2 much. second, i am somewhat competant in that i have
managed 2 get this far.
i've spent many many many hours trying to get my linux box to masq
correctly without leaving it to vurnable to the outside world. so
far, everything works correctly except a few things. these being irc
dcc sends/chats that i initiate (i can accept with no problems at
all), and i can't create a gaming server (quake3 or warcraft 2
battlenet), however, i can join someone else's game. this leads me
to believe the problem is somehow related. I have looked at the ip-
masq and ipchains howto's many times and have spent countless hours
playing with my ipchains rulesets. I have also taken the time to
look over the mailing list archive trying to find a solution for this
problem. I keep seing the responce that it's an mirc setting. So, i
tried the advice. clearing the local host & ip address box and
checking them under always get on connect, also i've set the lookup
method to normal as suggested. the problem with this is that i can
successfully dcc chat/send to myself, but nobody else. when they get
request it comes in as the ip 192.168.0.1 (my local net address for
the machine im using mirc on), which keeps it from working. when i
change the lookup method to server, i get "unable to connect"
messages when chatting anyone (even myself), but my ip is the correct
internet ip. this leaves me to believe it's my rc.firewall ruleset?
which is why i've spent countless hours working on it, i've even
tried allowing everything (making my system wide open) so that i
could see it work (and of course it doesnt). at this point, i need
help!
my ip masq system is running redhat linux 6.1 (kernel 2.2-12 in
default redhat configuration, i didnt recompile it).
my rc.firewall looks similiar to:
PATH=/sbin:/bin:/usr/sbin:/usr/bin
/sbin/depmod -a
/sbin/modprobe ip_masq_irc ports=6667,6666,6665,1024
/sbin/modprobe ip_masq_quake 26000,27000,27910,27960
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
# set ip addresses and interfaces
extip="`/sbin/ifconfig eth1 | grep 'inet addr' | awk '{print $2}' | sed
's/.*://'`"
extint="eth1"
intint="eth0"
intnet="192.168.0.0/24"
# timeouts
ipchains -M -S 7200 10 160
# input
ipchains -F input
ipchains -P input REJECT
# i just found the below line 2day and didnt notice a difference?
ipchains -A input -i $extint -s 0/0 67 -d 0/0 68 -p udp -j ACCEPT
ipchains -A input -i $intint -s $intnet -d 0.0.0.0/0 -j ACCEPT
ipchains -A input -i $extint -s $intnet -d 0.0.0.0/0 -j REJECT
ipchains -A input -i $extint -s 0.0.0.0/0 -d $extip/32 -j ACCEPT
ipchains -A input -i lo -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
ipchains -A input -s 0.0.0.0/0 -d 0.0.0.0/0 -j REJECT
# output
ipchains -F output
ipchains -P output REJECT
ipchains -A output -i $intint -s 0.0.0.0/0 -d $intnet -j ACCEPT
ipchains -A output -i $extint -s 0.0.0.0/0 -d $intnet -l -j REJECT
# this one i dont even understand why it's supposed 2 reject it, it looks
legit 2 me. i got this from the howto.
ipchains -A output -i $extint -s $intnet -d 0.0.0.0/0 -l -j REJECT
ipchains -A output -i $extint -s $extip/32 -d 0.0.0.0/0 -j ACCEPT
ipchains -A output -i lo -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
ipchains -A output -s 0.0.0.0/0 -d 0.0.0.0/0 -l -j REJECT
# forward
ipchains -F forward
ipchains -P forward DENY
ipchains -A forward -i $extint -s $intnet -d 0.0.0.0/0 -j MASQ
ipchains -A forward -s 0.0.0.0/0 -d 0.0.0.0/0 -l -j REJECT
# eof
i'd imagine im missing something crutial in the rc.firewall.
>From what i can tell, the dcc chat sends a request, they get the
request, and send an acknowledgement (which im waiting for) and I
never get it. I'm assuming that the ruleset is somehow blocking it
from coming back. This problem seems to be very similiar to what im
experiencing with the games too.
As for the rest of the system, it's basically a default install of
redhat linux 6.1 (console only) with a few tweaks here and there.
mirc is running on a windows machine (of course) but i am also
recieving the same problem in xchat (on a different linux box behind
the gateway) and in bitchx so i'm fairly sure it's not just mirc.
Oh ya, for quake3, im running quake 3 on linux (thanks to loki
entertainment).
i've seen many posts on this problem and i've seen many illusive
answers, the only one i saw that really helped me at all was by
John, who showed the method which allowed me to dcc chat/send to
myself (which actually will be useful as i can now continue writing
my mirc script), but for the rest of the usefulness, i really would
like to get this working correctly. I thank you for actually reading
this extremely long post, and for any help you might be able to
give me.
Thanks,
Unreal ([EMAIL PROTECTED])
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
