[LARTC] IRC and DCC

[LARTC] IRC and DCC

[Joachim Wickman]

[-- Attachment #1: Type: text/plain, Size: 398 bytes --]

Hello

I'm running NAT on my Linux box (192.168.0.1) with this command

/usr/local/sbin/iptables -t nat -A POSTROUTING -o ippp0 -j MASQUERADE

Everything is working fine, except DCC in IRC.
When I try to send something the remote machine get's "can't connect"

Have I missed something, or what?
It does work when I NAT with ipchains, but I like iptables more.

Thanks,
   Joachim



[-- Attachment #2: Type: text/html, Size: 1329 bytes --]

Re: [LARTC] IRC and DCC

[Joachim Wickman]

[-- Attachment #1: Type: text/plain, Size: 1125 bytes --]

I have compiled everything into the kernel

  ----- Original Message ----- 
  From: Greg Scott 
  To: 'Joachim Wickman' ; lartc@mailman.ds9a.nl 
  Sent: Saturday, November 03, 2001 12:31 AM
  Subject: RE: [LARTC] IRC and DCC


  There are some modules you need to modprobe.  Try this:
   
      /sbin/modprobe ip_conntrack_irc

  I'll bet there are also others.  Is there some central list of modules and what they do anywhere?
   
  - Greg
   
   
    -----Original Message-----
    From: Joachim Wickman [mailto:jwickman@tawi.fi]
    Sent: Friday, November 02, 2001 3:47 PM
    To: lartc@mailman.ds9a.nl
    Subject: [LARTC] IRC and DCC


    Hello

    I'm running NAT on my Linux box (192.168.0.1) with this command
     
    /usr/local/sbin/iptables -t nat -A POSTROUTING -o ippp0 -j MASQUERADE
     
    Everything is working fine, except DCC in IRC.
    When I try to send something the remote machine get's "can't connect"
     
    Have I missed something, or what?
    It does work when I NAT with ipchains, but I like iptables more.
     
    Thanks,
       Joachim

     

[-- Attachment #2: Type: text/html, Size: 3888 bytes --]

RE: [LARTC] IRC and DCC

[Greg Scott]

[-- Attachment #1: Type: text/plain, Size: 768 bytes --]

There are some modules you need to modprobe.  Try this:
 
    /sbin/modprobe ip_conntrack_irc

I'll bet there are also others.  Is there some central list of modules and
what they do anywhere?
 
- Greg
 
 

-----Original Message-----
From: Joachim Wickman [mailto:jwickman@tawi.fi]
Sent: Friday, November 02, 2001 3:47 PM
To: lartc@mailman.ds9a.nl
Subject: [LARTC] IRC and DCC


Hello
 
I'm running NAT on my Linux box (192.168.0.1) with this command
 
/usr/local/sbin/iptables -t nat -A POSTROUTING -o ippp0 -j MASQUERADE
 
Everything is working fine, except DCC in IRC.
When I try to send something the remote machine get's "can't connect"
 
Have I missed something, or what?
It does work when I NAT with ipchains, but I like iptables more.
 
Thanks,
   Joachim

 


[-- Attachment #2: Type: text/html, Size: 2704 bytes --]

RE: [LARTC] IRC and DCC

[Largo Hellenz]

[-- Attachment #1: Type: text/plain, Size: 1935 bytes --]

i had this same problem... dcc's sent to me after i requested them within a
few seconds would work, but dcc's sent to me  minutes after would
drop...(can't connect)

the solution for me was to install socks5 on gateway only allowing relaying
from internal interface and opening up port tcp/1080 (or whatever your
socks5 port is) on the external interface for incoming connections.

my two questions are:
1) is this a security issue to open up 1080 externally?
2) i can only connect to irc servers that dont require ident.... (ie.
underet, but not dalnet)... any ideads?

thanks,
fernando pando
  -----Original Message-----
  From: lartc-admin@mailman.ds9a.nl [mailto:lartc-admin@mailman.ds9a.nl]On
Behalf Of Joachim Wickman
  Sent: Friday, November 02, 2001 5:25 PM
  To: Greg Scott; lartc@mailman.ds9a.nl
  Subject: Re: [LARTC] IRC and DCC


  I have compiled everything into the kernel

    ----- Original Message -----
    From: Greg Scott
    To: 'Joachim Wickman' ; lartc@mailman.ds9a.nl
    Sent: Saturday, November 03, 2001 12:31 AM
    Subject: RE: [LARTC] IRC and DCC


    There are some modules you need to modprobe.  Try this:

        /sbin/modprobe ip_conntrack_irc

    I'll bet there are also others.  Is there some central list of modules
and what they do anywhere?

    - Greg


      -----Original Message-----
      From: Joachim Wickman [mailto:jwickman@tawi.fi]
      Sent: Friday, November 02, 2001 3:47 PM
      To: lartc@mailman.ds9a.nl
      Subject: [LARTC] IRC and DCC


      Hello

      I'm running NAT on my Linux box (192.168.0.1) with this command

      /usr/local/sbin/iptables -t nat -A POSTROUTING -o ippp0 -j MASQUERADE

      Everything is working fine, except DCC in IRC.
      When I try to send something the remote machine get's "can't connect"

      Have I missed something, or what?
      It does work when I NAT with ipchains, but I like iptables more.

      Thanks,
         Joachim



[-- Attachment #2: Type: text/html, Size: 6075 bytes --]

RE: [LARTC] IRC and DCC

[Sebastian 'spax' Pape]

hi!

> 2) i can only connect to irc servers that dont require ident.... (ie.
> underet, but not dalnet)... any ideads?
Which identd did you install? If you use NAT/MASQ your identd should
be able to forward requests to the proper machine and you have to run
an identd on the client machines. The client-machine's identd also has
to allow the gateway-identd to ask him even if the connection goes out
to the internet. Or if you don't care about your idents let the
gateway-identd just return a dummy-string.

best regards

		Sebastian

-- 
Sebastian 'spax' Pape          | Three things are certain: Death, taxes, and 
mailto: sebastian@p-a-p-e.de   | lost data. Guess which has occurred...  
pgp: http://p-a-p-e.de/pgp.asc | 
         --- Do you want to know more? http://www.p-a-p-e.de/ ---


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] IRC and DCC

[Ivan Lopez]

download the sources of the last iptables distribution and read the INSTALL, there's a make most-of-pom (or make patch-o-matic for the brave) that asks you to patch your kernel with the latest (and coolest) features of netfilter, conntracking of dcc's included

ivan

On Nov/02/2001, Joachim Wickman wrote:

> 
> Hello
>  
> I'm running NAT on my Linux box (192.168.0.1) with this command
>  
> /usr/local/sbin/iptables -t nat -A POSTROUTING -o ippp0 -j MASQUERADE
>  
> Everything is working fine, except DCC in IRC.
> When I try to send something the remote machine get's "can't connect"
>  
> Have I missed something, or what?
> It does work when I NAT with ipchains, but I like iptables more.
>  
> Thanks,
>    Joachim
>  

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

[LARTC] IRC and DCC

[Joachim Wickman]

Jepp

I noticed that they included it in kernel 2.4.14 too.

Joachim




_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

RE: [LARTC] IRC and DCC

[Joachim Wickman]

Kernel 2.4.14

Legend: [*] built-in  [ ] excluded  <M> module  < > module capable

<*> Connection tracking (required for masq/NAT)
<*>   FTP protocol support
<*>   IRC protocol support
..
..
..

and

/sbin/modprobe ip_conntrack_irc
modprobe: Can't locate module ip_conntrack_irc

so no, it isn't a module.

It doesn't work with my secondary ISP.(maybe because I get private IPs
10.x.x.x), but it works to irc from the router.
Haven't tried with my primary yet. 

// Joachim



_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

RE: [LARTC] IRC and DCC

[Joachim Wickman]

> Is this from a piece of documentation someplace?  If so where?
> Could this be the list of modules and what they do?
> 
> - Greg

No. I took it out from the kernel configuration

// Joachim



_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

RE: [LARTC] IRC and DCC

[Greg Scott]

> Kernel 2.4.14
>
> Legend: [*] built-in  [ ] excluded  <M> module  < > module capable
>
> <*> Connection tracking (required for masq/NAT)
> <*>   FTP protocol support
> <*>   IRC protocol support
> ..
> ..
> ..

Is this from a piece of documentation someplace?  If so where?
Could this be the list of modules and what they do?

- Greg

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/