RE: Real Audio support yet?

2002-07-10 Thread Nathan Cassano
Read Audio does not need to be supported as it's protocol works just fine over NAT. I believe you are thinking about an old ipchains helper module that was used back when the Real Audio protocol wouldn't work over NAT. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: HTTP Port forwarding issues

2002-07-08 Thread Nathan Cassano
Hmm... After a little research it appears that I am wrong. Darn, I hate looking like a fool. Sorry for the misinformation. RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1 ftp://ftp.isi.edu/in-notes/rfc2616.txt Antony Stone wrote: Remember HTTP runs over UDP protocol also. WHAT ? RFC

RE: NetBIOS browsing across subnets

2002-07-05 Thread Nathan Cassano
A simple google search for routing NetBIOS linux reveals the following. Routing NetBIOS with Linux http://www.linuxplanet.com/linuxplanet/tutorials/1159/1/

RE: Linux Gateway/Firewall with NAT

2002-06-26 Thread Nathan Cassano
Hi Russell, However I have an SMTP server in the internal LAN and I have an mx record for it on the internet. What I want to do is put another IP address on the external interface (virtual IP??) and have that NAT'ed through to the internal IP address for the mail server on ports 25, 110,

RE: Additional user for iptables

2002-06-21 Thread Nathan Cassano
Dave Miller wrote: Hello - Is there a way to allow an additional (non root) user to access the iptables tool without using sudo or similar? Hi Dave, What are you trying to accomplish? What specific parts of iptables do you want your users to access? In any case if you are bent on

RE: a discussion starter i hope.

2002-06-13 Thread Nathan Cassano
Hi Alan, Now behind the firewall are 2 separate servers, each running a web service and each running on port 80. 1) The question is, with only 1 real world address available to you, what suggestions do you guy's have as to the configuration required to make both web servers available

RE: Need to NAT incomming packets

2002-06-13 Thread Nathan Cassano
Hi Eric, I was hoping have a SNAT rule for each incoming interface in the prerouting chain on the Core router but you can't do SNAT in prerouting with iptables. The problem lies in routing NAT'ed traffic back to it's respective device. If the devices have the same IP address there

RE: About mangle table

2002-06-12 Thread Nathan Cassano
Make sure that both the mark modules are loaded. modprobe ipt_mark modprobe ipt_MARK The error I get is: 'iptables v1.2.6a: Bad MARK value `1 Try `iptables -h' or 'iptables --help' for more information.

RE: TCP delay, solved

2002-06-12 Thread Nathan Cassano
. iptables -A INPUT -p tcp --dport 113 -j REJECT --reject-with tcp-reset -Original Message- From: Evan Cofsky [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 12, 2002 8:46 AM To: Nathan Cassano Cc: [EMAIL PROTECTED] Subject: Re: TCP delay It really sounds like ident lookups. Telnet

RE: TCP delay, SMTP errors

2002-06-11 Thread Nathan Cassano
Ramin wrote: First you have to find out what the reason of this delay is. Eg, is this because of the load on the server or the client or is it because of the poor layer 2 medium (lots of collisions...) or any other reason. The load on the our switch is low. 99% idle on the firewall, and 90%

RE: TCP delay

2002-06-11 Thread Nathan Cassano
Okay folks, I've narrowed this problem down a bit. There is a delay between the firewall and the external network when I telnet to ports 23 or 25 on any host on the external network. The weird thing is that port 22 (ssh) will give me a quick response. My only thought is that the state

TCP delay, SMTP errors

2002-06-10 Thread Nathan Cassano
Hi folks, Our website (on an internal NAT'ed network) connects our email server (on an external network). The website uses a SMTP PHP class to send mail using socket connections. The problem is a delay in connecting to the mail server that causes the class to quit prematurely. I fixed