RE: Windows Update through Mandrake firewall

[Ray Anderson <rsa@prideindustries.com>]

I have no problems updating several Windows machines behind a Mandrake
machine with iptables.  I do NOT have squid running, and only run the
standard iptables suite vs. the canned Mandrake firewall.

I do not believe this is an iptables issue, but perhaps something else
Mandrake has done with their firewall setup.  My rules are very simple, and
were obtained by following the tutorial from Oskar
(http://iptables-tutorial.frozentux.net/iptables-tutorial.html)  I go back
to this document often, and seem to glean something new from it each time.
(Thanks Oskar!)

You shouldn't have to have any ports open, but should use snat from the
internal machines to your external ip address, and dnat from the external ip
address to the related,established ports.  That should be it.

-=Ray
---------------------------------------
He who gets excited in fighting is sure to make mistakes.
Baron Manfred von Richthofen


> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org 
> [mailto:netfilter-admin@lists.netfilter.org] On Behalf Of 
> cbaker@bbbscentralohio.org
> Sent: Wednesday, February 11, 2004 11:03 AM
> To: netfilter@lists.netfilter.org
> Subject: Windows Update through Mandrake firewall
> 
> 
> I am having trouble running Windows Update through a Mandrake 
> Multi Network Firewall. I have already asked for help in 
> several other 
> forums.
> 
> I am able to browse other web sites just fine. The Windows 
> Update site 
> appears to fail up when I checks my PC for updates. Microsoft's site 
> support site said that I should "disable the firewall."
> 
> What ports do I need to open? What rules do I need to have? Could 
> this be a Squid issue (our web proxy server)?
> 
> Thanks,
> 
> Chris
> 
> 
> ========================================
> Chris Baker -- technical specialist
> 614-839-2447x108
> cbaker@bbbscentralohio.org
> Big Brothers Big Sisters of Central Ohio
> www.bbbscentralohio.org
> Opinions expressed in this e-mail are solely my own.
> 
>