From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Anderson, Ray" Subject: My apologies Date: Thu, 23 Oct 2003 07:29:55 -0700 Sender: netfilter-admin@lists.netfilter.org Message-ID: <9FEBBE3B5C27D311B0B90050041E59B00439EFBD@ziggy.prideindustries.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="Boundary_(ID_XkZJdE5IKXt8o1dWr26mLQ)" Return-path: Content-return: allowed Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --Boundary_(ID_XkZJdE5IKXt8o1dWr26mLQ) Content-type: text/plain For posting in HTML. Damn Outlook! -=Ray --------------------------------------- Never break your formation into less than two-ship elements. Stay in pairs. A man by himself is a liability, a two-ship team is an asset. If you are separated, join up immediately with other friendly airplanes. Major Thomas B. "Tommy" McGuire, USAAF --Boundary_(ID_XkZJdE5IKXt8o1dWr26mLQ) Content-type: text/html Content-transfer-encoding: quoted-printable My apologies

For posting in HTML.  Damn Outlook!

-=3DRay
---------------------------------------
Never break your formation into less than two-ship = elements. Stay in pairs. A man by himself is a liability, a two-ship = team is an asset. If you are separated, join up immediately with other = friendly airplanes.

Major Thomas B. "Tommy" McGuire, = USAAF

= --Boundary_(ID_XkZJdE5IKXt8o1dWr26mLQ)-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Sylvain BERTRAND" Subject: transparent IRC proxy: doesnt work Date: Thu, 23 Oct 2003 17:03:31 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001901c39976$d2d57120$6500a8c0@SYFLO> References: <9FEBBE3B5C27D311B0B90050041E59B00439EFBD@ziggy.prideindustries.com> Reply-To: "Sylvain BERTRAND" Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0016_01C39987.964B2E50" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0016_01C39987.964B2E50 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable My apologiesHi everyone, I have a router/firewall on a public /24. I installed tircproxy in order = to have a transparent proxy (to filter DCC send requests). Here are the lines related to IRC in my rc.firewall: ${IPTABLES} -t nat -A PREROUTING -s ${INTERNAL_LAN} -p tcp --dport = 6660:6669 -j REDIRECT --to-port 7666 ${IPTABLES} -t nat -A PREROUTING -s ${INTERNAL_LAN} -p udp --dport = 6660:6669 -j REDIRECT --to-port 7666 and here's the command I use to launch the proxy: tircproxy -s 7666 -b ${MY_IP} -S -K -R -I There are several strange things: - many connexions between my internal lan and external servers on port = 6667 still exist... they shouldnt since I redirected the 6667 trafic? - many connexions between my router on ports >1024 and.... my router's = port 7666! I was expecting local machines to connect on 7666, but not = the router itself? IRC seems to be working for clients, but I think it does through direct = connexions...=20 Can anyone help me about that? Sylvain ------=_NextPart_000_0016_01C39987.964B2E50 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable My apologies
Hi everyone,
 
I have a router/firewall on a public = /24. I=20 installed tircproxy in order to have a transparent proxy (to filter DCC = send=20 requests).
Here are the lines related to IRC in my = rc.firewall:
 
${IPTABLES} -t nat -A PREROUTING -s = ${INTERNAL_LAN}=20 -p tcp --dport 6660:6669 -j REDIRECT --to-port 7666
${IPTABLES} -t = nat -A=20 PREROUTING -s ${INTERNAL_LAN} -p udp --dport 6660:6669 -j REDIRECT = --to-port=20 7666
 
and here's the command I use to launch = the=20 proxy:
 
tircproxy -s 7666 -b ${MY_IP} -S -K -R=20 -I
 
There are several strange = things:
- many connexions between my internal = lan and=20 external servers on port 6667 still exist... they shouldnt since I = redirected=20 the 6667 trafic?
- many connexions between my router on = ports=20 >1024 and.... my router's port 7666! I was expecting local machines = to=20 connect on 7666, but not the router itself?
 
IRC seems to be working for clients, = but I think=20 it does through direct connexions...
Can anyone help me about = that?
 
 
Sylvain
------=_NextPart_000_0016_01C39987.964B2E50-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alistair Tonner Subject: Re: transparent IRC proxy: doesnt work Date: Thu, 23 Oct 2003 14:00:19 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200310231400.19551.Alistair@nerdnet.ca> References: <9FEBBE3B5C27D311B0B90050041E59B00439EFBD@ziggy.prideindustries.com> <001901c39976$d2d57120$6500a8c0@SYFLO> Reply-To: Alistair@nerdnet.ca Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <001901c39976$d2d57120$6500a8c0@SYFLO> Content-Disposition: inline Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Sylvain BERTRAND Cc: netfilter@lists.netfilter.org On October 23, 2003 11:03 am, Sylvain BERTRAND wrote: > My apologiesHi everyone, > > I have a router/firewall on a public /24. I installed tircproxy in order to > have a transparent proxy (to filter DCC send requests). Here are the lines > related to IRC in my rc.firewall: > > ${IPTABLES} -t nat -A PREROUTING -s ${INTERNAL_LAN} -p tcp --dport > 6660:6669 -j REDIRECT --to-port 7666 ${IPTABLES} -t nat -A PREROUTING -s > ${INTERNAL_LAN} -p udp --dport 6660:6669 -j REDIRECT --to-port 7666 > > and here's the command I use to launch the proxy: > > tircproxy -s 7666 -b ${MY_IP} -S -K -R -I > > There are several strange things: > - many connexions between my internal lan and external servers on port 6667 > still exist... they shouldnt since I redirected the 6667 trafic? - many > connexions between my router on ports >1024 and.... my router's port 7666! > I was expecting local machines to connect on 7666, but not the router > itself? > > IRC seems to be working for clients, but I think it does through direct > connexions... Can anyone help me about that? > This is what DCC does. Direct client to client connection. Once the initial communication is done from the clients to the server and back, the actual transfer is direct from client to client For the record, why are you using a proxy? -- does this proxy do filtering on some other level? -- is this filtering working? > > Sylvain -- Alistair Tonner nerdnet.ca Senior Systems Analyst - RSS Any sufficiently advanced technology will have the appearance of magic. Lets get magical!