Re: irc+iptables

[Alistair Tonner <Alistair@nerdnet.ca>]

On October 2, 2004 05:03 am, it clown wrote:
> Hi All,
>
> i am having some trouble in getting irc working through
> iptables and squid.When i put a forwarder in my iptables
> rule i can connect to irc but when i want to go through the
> proxy i have no luck.I have loaded the ip_nat_irc and
> tried:
>
> -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT
> --to-ports 3128.
>
> I have made the changes in squid to allown port 6667.
> Port 6667 is allowed OUT.

	Squid itself will not proxy IRC that I'm aware of.  When you say 
	'Forwarder' -- I take it you allow the connection out directly to the 
	IRC server with a rule in the FORWARD chain.  
	
	What (client) are you using to connect to IRC through the proxy?
	And --- for what it's worth why do you believe that Squid will 
	proxy the IRC connection?

	There are web based clients that can run through proxies, 
	however they are completely java based, and the connection
	is from the webserver end to the IRC server.  There is a java 
	applet that someone cooked up that has the initial connection
	from the webserver, but requires that the client can see the 
	internet without filtering as subsequent traffic is from the client 
	to the IRC server, across not well known ports, and this also 	
	has some other issues that make it unwise to use.
	
	Alistair Tonner
	RSO Technical Services, 
	HPUX Support