[masq] Redhat 5.1 w/ 2.0.35 and ipautofw

[Steven Huang]

Hi all,

 

I asked this before but didn't get any replies, but there are obviously some experts on port forwarding out there, so thought I'd try again with more details.

 

I've got Redhat 5.1 with custom built kernel 2.0.35 from there kernel-source rpm with ipautofw (and other masq settings) on and as well the ipportfw patch with option set on.  This is running on a machine with two 3com 3c509b, one connected to the internet via cable modem and one to my internet network which currently consists of one other win98 machine.

 

I've got ip masquerading going no problem with the commands straight out of the HOWTO, i.e.,

 

/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc
/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0    

 

this works great on the win98, I can http, ftp, etc...

 

Now, I'm trying to set up port forwarding (and, yes, it is to play games)

 

I run (for Diablo battle.net) the following commands on the Linux box

 

ipautofw -A -r udp 6112 6112 -c tcp 116

ipautofw -A -r udp 6112 6112 -c tcp 118

 

these commands were taken from the masq apps page.

 

and the commands execute without error.  However, I get a message when connecting to battle.net that my internet connection is not processing udp packets.

 

I get the same problem with Age of Empires when I run

 

ipautofw -A -r udp 1410 1450 -h 192.168.1.2

ipautofw -A -r tcp 1410 1450 -h 192.168.1.2

 

i.e., it doesn't connect to the host.

 

192.168.1.2 is the ip address of the win98 machine.  I tried compiling ipautofw but it gives me A LOT of warnings and finally craps out (I just did a make in the ipautofw directory)

 

I am running tcp wrappers with ALL:ALL in the hosts.deny file and then in hosts.allow the local network and the linux boxes outside ip address, but I'm sure tcp wrappers only affects inetd services, right?

 

I've tried ipportfw, which also executes without errors, but that doesn't work either.

 

Can someone out there please help me out with the following questions?

 

(1) to confirm the problems are specific to my system, is anyone running ipautofw (not just masq) with Redhat 5.1 and kernel 2.0.35 from kernel-source rpm?

 

(2) how do I test whether or not the port forwarding is actually occuring or not, to see if it might be a problem with the Win98 machine (although I kinda doubt this since all the games work when I connect the cable modem to the win98 box)

 

(3) has anyone been able to compile ipautofw 2.0.0 with redhat 5.1?

 

(4) does the /etc/protocols file have anything to do with this?  There was a mention of it in comp.os.linux.networking but it didn't go further (ipautofw in /proc/net showed protocol 11, /etc/protocols shows udp = 17)

 

(5) does anyone have a simple explanation for my problem or anything at all to check?  I've gone through my setup head to toe several times.

 

I'm almost at the point of switching to Win98 and Sygate to masquerade for the Linux machine, but who has ever heard of such a setup!

 

Thanks in advance (sorry for the length),

 

Steve

[EMAIL PROTECTED]