Liaise with port forwarding proxies?

Liaise with port forwarding proxies?

[Atsushi Nakagawa]

Hi,

Is there something that allows iptables to talk with Dante server (the
SOCKS server) to gather which ports it's opened for receiving incoming
connections?  Or maybe a way for iptables to determine and match by
which process an incoming packet will be going to?

Regards,


-- 
Atsushi Nakagawa
<atnak@chejz.com>
Changes are made when there is inconvenience.

Re: Liaise with port forwarding proxies?

[Dharmendra.T]

[-- Attachment #1: Type: text/plain, Size: 883 bytes --]

hi
Can you say more clearly what you are trying?

Regards
Dharmendra T.

On Fri, 2003-09-05 at 15:43, Atsushi Nakagawa wrote:

    Hi,
    
    Is there something that allows iptables to talk with Dante server (the
    SOCKS server) to gather which ports it's opened for receiving incoming
    connections?  Or maybe a way for iptables to determine and match by
    which process an incoming packet will be going to?
    
    Regards,
    
    
    -- 
    Atsushi Nakagawa
    <atnak@chejz.com>
    Changes are made when there is inconvenience.
    
    

-- 
Regards
Dharmendra.T
dharmu@nsecure.net

This message is intended for the addressee only. It may contain
privileged or Confidential information. If you have received this
message in error,please notify the sender and destroy the message
immediately.Unauthorised use or reproduction of this message is strictly
prohibited.

[-- Attachment #2: Type: text/html, Size: 2151 bytes --]

Re: Liaise with port forwarding proxies?

[Atsushi Nakagawa]

"Dharmendra.T" <dharmu@nsecure.net> wrote:
> Can you say more clearly what you are trying?

I have a linux server with services and an iptables configuration set to
discard any NEW incoming packets that aren't for these services.  I do
this based on protocol and port.  (e.g. Accept: TCP/80, TCP/21)

I want to add a SOCKS5 server (Dante) to the list of services.  The
problem with this is that this server can listen to any arbitary port
above 1024 for port tunneling, but I don't want to automatically allow
all ports > 1024 in iptables.

I'm wondering if there is a way for iptables to determine which ports
are in use by the SOCKS5 server and selectively allow those.

Regards,


-- 
Atsushi Nakagawa
<atnak@chejz.com>
Changes are made when there is inconvenience.

Re: Liaise with port forwarding proxies?

[Dharmendra.T]

[-- Attachment #1: Type: text/plain, Size: 1282 bytes --]

On Fri, 2003-09-05 at 20:35, Atsushi Nakagawa wrote:

    "Dharmendra.T" <dharmu@nsecure.net> wrote:
    > Can you say more clearly what you are trying?
    
    I have a linux server with services and an iptables configuration set to
    discard any NEW incoming packets that aren't for these services.  I do
    this based on protocol and port.  (e.g. Accept: TCP/80, TCP/21)
    
    I want to add a SOCKS5 server (Dante) to the list of services.  The
    problem with this is that this server can listen to any arbitary port
    above 1024 for port tunneling, but I don't want to automatically allow
    all ports > 1024 in iptables.
    
    I'm wondering if there is a way for iptables to determine which ports
    are in use by the SOCKS5 server and selectively allow those.


You can allow related packets.

    
    Regards,
    
    
    -- 
    Atsushi Nakagawa
    <atnak@chejz.com>
    Changes are made when there is inconvenience.
    
    

-- 
Regards
Dharmendra.T
dharmu@nsecure.net

This message is intended for the addressee only. It may contain
privileged or Confidential information. If you have received this
message in error,please notify the sender and destroy the message
immediately.Unauthorised use or reproduction of this message is strictly
prohibited.

[-- Attachment #2: Type: text/html, Size: 3067 bytes --]