iptables and port 113/auth requests

iptables and port 113/auth requests

[Robert Jones]

[-- Attachment #1: Type: text/plain, Size: 584 bytes --]

I am trying to build a firewall and i have a problem
i have redhat 8.0
2 nic cards eth0 and eth1..... eth0 being external eth1 being internal
eth0 is connected to a cable modem.  gets its ip via dhcp
i run a dhcpd server on my eth1
int lan is 192.168.1.0
trying to set up ip masquerading for my int lan
some of my users use mirc on irc servers that required an ident reply (port 113)
i would like the ident requests from the irc server to be fowarded to the int lan so that mirc can reply to the requests
i domt know if this is even possible but was wondering if anyone could help me

[-- Attachment #2: Type: text/html, Size: 1297 bytes --]

RE: iptables and port 113/auth requests

[Rob Sterenborg]

> some of my users use mirc on irc servers that required 
> an ident reply (port 113)
> i would like the ident requests from the irc server to 
> be fowarded to the int lan so that mirc can reply to 
> the requests
> i domt know if this is even possible but was wondering 
> if anyone could help me

Did you try using (as one of the first rules) :

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT


Rob.

Re: iptables and port 113/auth requests

[Leonardo Rodrigues Magalhães]

    If only a single user ( and no more than one ) requires this, you could
try forwarding in PREROUTING, like:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 113 -j DNAT --to
192.168.1.XX:113

    It should work. But this will redirect ALL ident connections that reach
your machine to internal user machine. It's impossible to know if it's an
mirc ident request or if it's a sendmail ident request for example.


    Sincerily,
    Leonardo Rodrigues

----- Original Message -----
From: Robert Jones
To: netfilter@lists.netfilter.org
Sent: Tuesday, February 04, 2003 6:50 PM
Subject: iptables and port 113/auth requests


I am trying to build a firewall and i have a problem
i have redhat 8.0
2 nic cards eth0 and eth1..... eth0 being external eth1 being internal
eth0 is connected to a cable modem.  gets its ip via dhcp
i run a dhcpd server on my eth1
int lan is 192.168.1.0
trying to set up ip masquerading for my int lan
some of my users use mirc on irc servers that required an ident reply (port
113)
i would like the ident requests from the irc server to be fowarded to the
int lan so that mirc can reply to the requests
i domt know if this is even possible but was wondering if anyone could help
me