From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Mihai Tanasescu" Subject: IRC and Conntrack problem Date: Sat, 2 Nov 2002 17:42:56 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <00d601c28286$83cf1390$6928a8c0@MIHAI> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00D3_01C28297.473651D0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_00D3_01C28297.473651D0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have installed the kernel module for conntracking irc connections. = Still I can only receive dcc sends but I can't initiate any dcc send = sessions. I get the error message failed to connect or something like = that.=20 What am I doing wrong? ------=_NextPart_000_00D3_01C28297.473651D0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I have installed the kernel module for = conntracking=20 irc connections. Still I can only receive dcc sends but I can't initiate = any dcc=20 send sessions. I get the error message failed to connect or something = like=20 that. 
What am I doing wrong?
------=_NextPart_000_00D3_01C28297.473651D0-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Roy Sigurd Karlsbakk Subject: Re: IRC and Conntrack problem Date: Sun, 03 Nov 2002 19:11:21 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3DC566C9.2050109@karlsbakk.net> References: <00d601c28286$83cf1390$6928a8c0@MIHAI> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Mihai Tanasescu , netfilter Mihai Tanasescu wrote: > I have installed the kernel module for conntracking irc connections. > Still I can only receive dcc sends but I can't initiate any dcc send > sessions. I get the error message failed to connect or something like > that. > What am I doing wrong? have you got any lines in iptables looking like this? iptables -A INPUT -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT please send your iptables config From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Mihai Tanasescu" Subject: IRC and Conntrack problem Date: Sat, 2 Nov 2002 17:39:26 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <00bb01c28286$0670f5d0$6928a8c0@MIHAI> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00B8_01C28296.C9BE1C60" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_00B8_01C28296.C9BE1C60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have installed the kernel module for conntracking irc connections. = Still I can only receive dcc sends but I can't initiate any dcc send = sessions. I get the error message failed to connect or something like = that.=20 What am I doing wrong? ------=_NextPart_000_00B8_01C28296.C9BE1C60 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I have installed the kernel module for = conntracking=20 irc connections. Still I can only receive dcc sends but I can't initiate = any dcc=20 send sessions. I get the error message failed to connect or something = like=20 that. 
What am I doing wrong?
------=_NextPart_000_00B8_01C28296.C9BE1C60-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alistair Tonner Subject: Re: IRC and Conntrack problem Date: Sun, 3 Nov 2002 06:15:28 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20021103111528.GA14182@Ajftl1.ajfthome.on.ca> References: <00d601c28286$83cf1390$6928a8c0@MIHAI> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: Content-Disposition: inline In-Reply-To: <00d601c28286$83cf1390$6928a8c0@MIHAI>; from cloud@sky.kappa.ro on Sat, Nov 02, 2002 at 10:42:56 -0500 Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; format="flowed"; charset="us-ascii" To: Mihai Tanasescu Cc: netfilter@lists.netfilter.org 1) the ipt_conntrack_irc and ipt_nat_irc modules need to know what ports you are connecting to the IRC servers on. You pass these port numbers as a parameter to the module when loaded. 2) IRC clients behind the firewall *must* use their *inside* ip address *not* the firewall ip address ... this is notable in MIRC -- the client defaults to using the ip reported by the server. -- that turns the connection requests into something that iptables will drop as a forged IRC command -- check your logs. In my case: /sbin/modprobe ip_conntrack_irc ports=6663,6664,6665,6666,6667,6668,6669,7000 /sbin/modprobe ip_nat_irc ports=6663,6664,6665,6666,6667,6668,6669,7000 You can edit ip_conntrack_irc.c and ip_nat_irc.c and change MAX_PORTS if you need more ports to connect to and then rebuild the modules. On 2002.11.02 10:42 Mihai Tanasescu wrote: > I have installed the kernel module for conntracking irc connections. > Still I can only receive dcc sends but I can't initiate any dcc send > sessions. I get the error message failed to connect or something like > that. > What am I doing wrong? >