From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Sylvain BERTRAND" Subject: transparent IRC proxy: doesnt work Date: Thu, 23 Oct 2003 17:03:31 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001901c39976$d2d57120$6500a8c0@SYFLO> References: <9FEBBE3B5C27D311B0B90050041E59B00439EFBD@ziggy.prideindustries.com> Reply-To: "Sylvain BERTRAND" Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0016_01C39987.964B2E50" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0016_01C39987.964B2E50 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable My apologiesHi everyone, I have a router/firewall on a public /24. I installed tircproxy in order = to have a transparent proxy (to filter DCC send requests). Here are the lines related to IRC in my rc.firewall: ${IPTABLES} -t nat -A PREROUTING -s ${INTERNAL_LAN} -p tcp --dport = 6660:6669 -j REDIRECT --to-port 7666 ${IPTABLES} -t nat -A PREROUTING -s ${INTERNAL_LAN} -p udp --dport = 6660:6669 -j REDIRECT --to-port 7666 and here's the command I use to launch the proxy: tircproxy -s 7666 -b ${MY_IP} -S -K -R -I There are several strange things: - many connexions between my internal lan and external servers on port = 6667 still exist... they shouldnt since I redirected the 6667 trafic? - many connexions between my router on ports >1024 and.... my router's = port 7666! I was expecting local machines to connect on 7666, but not = the router itself? IRC seems to be working for clients, but I think it does through direct = connexions...=20 Can anyone help me about that? Sylvain ------=_NextPart_000_0016_01C39987.964B2E50 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable My apologies
Hi everyone,
 
I have a router/firewall on a public = /24. I=20 installed tircproxy in order to have a transparent proxy (to filter DCC = send=20 requests).
Here are the lines related to IRC in my = rc.firewall:
 
${IPTABLES} -t nat -A PREROUTING -s = ${INTERNAL_LAN}=20 -p tcp --dport 6660:6669 -j REDIRECT --to-port 7666
${IPTABLES} -t = nat -A=20 PREROUTING -s ${INTERNAL_LAN} -p udp --dport 6660:6669 -j REDIRECT = --to-port=20 7666
 
and here's the command I use to launch = the=20 proxy:
 
tircproxy -s 7666 -b ${MY_IP} -S -K -R=20 -I
 
There are several strange = things:
- many connexions between my internal = lan and=20 external servers on port 6667 still exist... they shouldnt since I = redirected=20 the 6667 trafic?
- many connexions between my router on = ports=20 >1024 and.... my router's port 7666! I was expecting local machines = to=20 connect on 7666, but not the router itself?
 
IRC seems to be working for clients, = but I think=20 it does through direct connexions...
Can anyone help me about = that?
 
 
Sylvain
------=_NextPart_000_0016_01C39987.964B2E50--