Real Player Helper in 2.4

Real Player Helper in 2.4

[Max Headroom]

I am interested in getting information about
the NAT helper for Real Player in the 2.4
kernel. There is a NAT helper in the 2.2 kernel
but no one seems to be working on it.
Does anyone know where I could get information
about the Real Play NAT helper support
in the 2.4 kernel? Who is working on it?

MH

__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

Re: Real Player Helper in 2.4

[Bob Sully]

Max (that's great, nearly forgot about that commercial!)

I use this in my script to allow the RealVideo client; the RealAudio 
just seems to work without any special rules:

if [ $RV_CLIENT -gt 0 ]; then
   iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p TCP --sport \ 
   $UNPRIVPORTS --dport 554 -s $EXTERNAL_IP -d $ANYWHERE -j ACCEPT

   iptables -A INPUT -i $EXTERNAL_INTERFACE -p TCP --sport 554 \ 
   -s $ANYWHERE -d $EXTERNAL_IP -j ACCEPT

   if [ $MASQUERADING -gt 0 ]; then 
      iptables -A FORWARD -p TCP -s $INTERNAL_NETWORK --sport \ 
      $UNPRIVPORTS --dport 544 -j ACCEPT
      iptables -A FORWARD -m state --state ESTABLISHED,RELATED \
      -p TCP -d $INTERNAL_NETWORK --sport 544 --dport $UNPRIVPORTS \ 
      -j ACCEPT
   fi
   if [ $VERBOSE -gt 0 ]; then
      echo "firewall: Real Video client enabled"
   fi
fi

HTH -- Bob

On Mon, 10 Jun 2002, Max Headroom wrote:

> I am interested in getting information about
> the NAT helper for Real Player in the 2.4
> kernel. There is a NAT helper in the 2.2 kernel
> but no one seems to be working on it.
> Does anyone know where I could get information
> about the Real Play NAT helper support
> in the 2.4 kernel? Who is working on it?
> 
> MH
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! - Official partner of 2002 FIFA World Cup
> http://fifaworldcup.yahoo.com
> 

-- 
________________________________________
Bob Sully - Simi Valley, California, USA
http://www.malibyte.net

"The weather is here - wish you were beautiful." - J. Buffett

Re: Real Player Helper in 2.4

[Max Headroom]

Bob,
Thanks. But, TCP doesn't need a NAT helper
because only UDP uses an anonymous port
that the server needs to connect back to
the client on. The argument is that UDP
give better performace which is why
I am trying to get a 2.4 NAT helper for
Real Player. Anyone know of anyone else
working on the problem? ICQ would is another
helper I am looking for. Anyone working on
that?
MH


--- Bob Sully <rcs@malibyte.net> wrote:
> 
> Max (that's great, nearly forgot about that
> commercial!)
> 
> I use this in my script to allow the RealVideo
> client; the RealAudio 
> just seems to work without any special rules:
> 
> if [ $RV_CLIENT -gt 0 ]; then
>    iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p TCP
> --sport \ 
>    $UNPRIVPORTS --dport 554 -s $EXTERNAL_IP -d
> $ANYWHERE -j ACCEPT
> 
>    iptables -A INPUT -i $EXTERNAL_INTERFACE -p TCP
> --sport 554 \ 
>    -s $ANYWHERE -d $EXTERNAL_IP -j ACCEPT
> 
>    if [ $MASQUERADING -gt 0 ]; then 
>       iptables -A FORWARD -p TCP -s
> $INTERNAL_NETWORK --sport \ 
>       $UNPRIVPORTS --dport 544 -j ACCEPT
>       iptables -A FORWARD -m state --state
> ESTABLISHED,RELATED \
>       -p TCP -d $INTERNAL_NETWORK --sport 544
> --dport $UNPRIVPORTS \ 
>       -j ACCEPT
>    fi
>    if [ $VERBOSE -gt 0 ]; then
>       echo "firewall: Real Video client enabled"
>    fi
> fi
> 
> HTH -- Bob
> 
> On Mon, 10 Jun 2002, Max Headroom wrote:
> 
> > I am interested in getting information about
> > the NAT helper for Real Player in the 2.4
> > kernel. There is a NAT helper in the 2.2 kernel
> > but no one seems to be working on it.
> > Does anyone know where I could get information
> > about the Real Play NAT helper support
> > in the 2.4 kernel? Who is working on it?
> > 
> > MH
> > 
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! - Official partner of 2002 FIFA World Cup
> > http://fifaworldcup.yahoo.com
> > 
> 
> -- 
> ________________________________________
> Bob Sully - Simi Valley, California, USA
> http://www.malibyte.net
> 
> "The weather is here - wish you were beautiful." -
> J. Buffett
> 
> 


__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

Re: Real Player Helper in 2.4

[Adam Young]

[-- Attachment #1: Type: text/plain, Size: 719 bytes --]

On Tue, 11 Jun 2002 09:59:02 -0700 (PDT)
Max Headroom <maxheadroom2323@yahoo.com> wrote:

> Bob,
> Thanks. But, TCP doesn't need a NAT helper
> because only UDP uses an anonymous port
> that the server needs to connect back to
> the client on. The argument is that UDP
> give better performace which is why
> I am trying to get a 2.4 NAT helper for
> Real Player. Anyone know of anyone else
> working on the problem? ICQ would is another
> helper I am looking for. Anyone working on
> that?
> MH
> 

	I know as far as ICQ goes, that a helper won't be made (at least to my
knowledge) since it is a closed protocol.  However, I'm sure there is
someone out there willing to design a helper for all our icq using
friends :)

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

RE: AIM/ICQ proxy (was: `Real Player Helper in 2.4')

[Jeff Bonner]

On Tue 11 Jun 2002 19:10, Adam Young wrote:

> > Thanks. But, TCP doesn't need a NAT helper because only
> > UDP uses an anonymous port that the server needs to connect
> > back to the client on. The argument is that UDP give better
> > better performace which is why I am trying to get a 2.4 NAT
> > helper for Real Player. Anyone know of anyone else working
> > on the problem? ICQ would is another helper I am looking for.
> > Anyone working on that?
> 
> 	I know as far as ICQ goes, that a helper won't be made 
> (at least to my knowledge) since it is a closed protocol.
> However, I'm sure there is someone out there willing to
> design a helper for all our icq using friends :)

I am not sure what the original context of this message was,
but I assume it asks for help traversing NAT/masquerade, in
which case:

I was able to use ReAIM (http://reaim.sourceforge.net) with
both AOL Instant Messenger and ICQ for file transfers, even
though it's not specifically designed to do the latter.  It's
also supposed to work with MSN, but I have not been able to
verify this yet (it should, though).

FWIW, I broke something in my rules (or elsewhere) and it says
it can't get the external IP anymore -- so it no longer works
for me.  But when it did, it allowed me to transfer files for
the first time with iptables.

I'd also suggest that, where supported by the client, a SOCKS
proxy might serve the same purpose.  Getting the "reference
implementation" from NEC isn't immediate, but it's free for
personal or research use once you're verified as eligible.
Get it at http://www.socks.nec.com/cgi-bin/download.pl.

Or you might go with an alternative like DeleGate, which is at
http://www.delegate.org.  It can also act as a simple origin
server for some protocols.

Still, this is more work than just inserting a module; I, too,
would be interested in kernel support for IM clients.

HTH,

Jeff Bonner