RE: Nobody can help me ??? :(

RE: Nobody can help me ??? :(

[Hanz F.]

Hi,
thanx Ferry for ur answer, I like long and detailed
answers. U look to be a smart guy, but u forget a
reason, which is: that no one has the answer !!  ;-)
I say this becoze any of the reasons u mentioned can
apply to my case, anyway if u looked to my 1st email
b4 answering u could save some of the time u spent
writing this answer.
1- in fact if there was any smell of whiners it could
be in my 2nd email but definetely not in the 1st. And
the 2nd was answered !!!
2- If there was insufficient information I could be
asked to provide more information (as u can see
frequently if u look into the archive)
3,4- I could be told if there was no effort from my
part to solve it, or if I was impolite I don't think
that all people accept that someone talk to them in an
impolite way without reacting.
A look to archive as well shows that there's some
questions answered although they are very evident, and
anyone who makes a small effort can get the answer.
5- it's simple to know that my question wasn't
answered in the archive if u looked into it.
6- My 2nd email was posted to be sure that the 1st
email wasn't ignored becoze everyone was busy at the
moment. Notice that some emails posted just b4 and
after it have been answered.

finally, I would say that if I used this mailing list
it was becoze I couldn't get my answer by any other
mean !!
Anyway I am not here to argue with anyone, I just want
to get an answer to my question becoze I prefer to use
the Linux system, but unfortunately there's no serious
support for it which encourage people to use the buggy
Microsoft Windows and related products !!

Best regards




====================
People are divided into two kinds: a kind who thinks
people are divided into two kinds and a kind who don't



--- Ferry van Steen <ferry.van.steen@InfoPart.nl>
wrote:
> There are several reasons your question doesn't get
> answered.
> 
> 1. You whine, people don't like whiners (I'm not
> saying you are :-))
> 2. Insufficient information was provided (Again, I'm
> not saying you did)
> 3. It was clear there was no effort from your part
> to solve it, we're not
> here to do your work (ok I hate repeating this, this
> is a general list, I
> didn't see your first post so let's just call this
> the general answers to
> your question)
> 4. You were impolite/rude in which case you can
> stuff the question and all
> future ones there where the sun don't shine
> 5. You asked a question that gets asked over and
> over and people tire from
> answering it, look in the archives/faq to prevent
> this. Generally you will
> be labeled like 1 or 3 above in which case future
> questions get less
> attention as well.
> 6. Perhaps just everyone was busy at the moment.
> Remember, nobody gets paid
> here it's all voluntary. You could have asked at a
> moment everyone was
> really busy and just hit delete. Monday mornings are
> moments like these.
> 
> Please remember I didn't see your first post and
> thus dunno which of the
> above apply to you. I'm not trying to offend/flame
> you. 
> 
> -----Original Message-----
> From: Hanz F. [mailto:hanz852@yahoo.com] 
> Sent: maandag 30 september 2002 10:27
> To: netfilter@lists.netfilter.org
> Subject: Nobody can help me ??? :(
> 
> 
> HI
> I've posted an email asking for help, but got no
> answer !! Isn't this mailing list usefull for new
> members or what ??
> All I need is to run all kind of softwares (IRC,
> ICQ,
> yahoo messenger ,.....) through Netfilter , isn't
> that
> possible ???
> Thanks to whom will answer me.
> 
> Hanz
> 
> 
> 
> =============
> There's three kind of people: people who can count
> and
> people who can't count.
> 
> 
> 
> __________________________________________________
> Do you Yahoo!?
> New DSL Internet Access from SBC & Yahoo!
> http://sbc.yahoo.com
> 


__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com

SNAT matching question

[Mohan Khurana]

Hi everyone,

I'm trying to make a dual-homed router right now.

I'm wondering, if I add two SNAT entries to the POSTROUTING chain of the
nat table, that are completely identical except the the fact that they
have different values for their specification of --to-source, will both of
them get the opportunity to match?  What decides which one matches them?

I am wondering, if packets come in, and I route them, and ensure that
their next-hop is one of the --to-sources, will the rule check both the
source range, and the value of the --to-source?

Example:

iptables -t nat -A POSTROUTING -s 192.168.2.10 -d \! 192.168.2.0/24 -j
SNAT --to-source 1.2.3.4
iptables -t nat -A POSTROUTING -s 192.168.2.10 -d \! 192.168.2.0/24 -j
SNAT --to-source 5.6.7.8

If in my iproute2 configuration, if I ensure that the packet is going out
with source 5.6.7.8 when flowing around, it should match to the second
rule, and skip the first altogether, right?  If I set it to hop to source
1.2.3.4, it should choose the first nat rule, and then skip the second one
altogether, right?

thanks much,

mohan

Nobody can help me ??? :(

[Hanz F.]

HI
I've posted an email asking for help, but got no
answer !! Isn't this mailing list usefull for new
members or what ??
All I need is to run all kind of softwares (IRC, ICQ,
yahoo messenger ,.....) through Netfilter , isn't that
possible ???
Thanks to whom will answer me.

Hanz



=============
There's three kind of people: people who can count and
people who can't count.



__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com

Re: Nobody can help me ??? :(

[Nick]

# iptables -m state --help



On Monday 30 September 2002 03:27 pm, Hanz F. wrote:
> HI
> I've posted an email asking for help, but got no
> answer !! Isn't this mailing list usefull for new
> members or what ??
> All I need is to run all kind of softwares (IRC, ICQ,
> yahoo messenger ,.....) through Netfilter , isn't that
> possible ???
> Thanks to whom will answer me.
>
> Hanz
>
>
>
> =============
> There's three kind of people: people who can count and
> people who can't count.
>
>
>
> __________________________________________________
> Do you Yahoo!?
> New DSL Internet Access from SBC & Yahoo!
> http://sbc.yahoo.com

Re: Nobody can help me ??? :(

[Gaël Le Mignot]

Mon, 30 Sep 2002 01:27:25 -0700 (PDT), tu as dit : 

 > HI
 > I've posted an email asking for help, but got no
 > answer !! Isn't this mailing list usefull for new
 > members or what ??
 > All I need is to run all kind of softwares (IRC, ICQ,
 > yahoo messenger ,.....) through Netfilter , isn't that
 > possible ???

for IRC, you can use the IRC protocol helper (modprobe ip_conntrack_irc and
modprobe ip_nat_irc if you do NAT too).

For others, you'll have to find a protocol helper, which is not included
in the "standard" kernels (I'm not even sure they exist).

But I use ICQ through a netfilter-powered gateway that does NAT and 
firewalling, and it seems to work

-- 
Gael Le Mignot "Kilobug" - kilobug@freesurf.fr - http://kilobug.free.fr
GSM         : 06.71.47.18.22 (in France)   ICQ UIN   : 7299959
Fingerprint : 1F2C 9804 7505 79DF 95E6 7323 B66B F67B 7103 C5DA

Member of HurdFr: http://hurdfr.org - The GNU Hurd: http://hurd.gnu.org

Re: Nobody can help me ??? :(

[Hanz F.]

Thanx Gael for your useful answer, and thanx for those
who tried to help.
But what is this "netfilter-powered gateway that does
NAT and firewalling" u are using ? and where to find
it ?
Thank u very much
Best regards 
Hanz




=============
There's three kind of people: people who can count and
people who can't count.


--- Gaël Le Mignot <kilobug@freesurf.fr> wrote:
> 
> Mon, 30 Sep 2002 01:27:25 -0700 (PDT), tu as dit : 
> 
>  > HI
>  > I've posted an email asking for help, but got no
>  > answer !! Isn't this mailing list usefull for new
>  > members or what ??
>  > All I need is to run all kind of softwares (IRC,
> ICQ,
>  > yahoo messenger ,.....) through Netfilter , isn't
> that
>  > possible ???
> 
> for IRC, you can use the IRC protocol helper
> (modprobe ip_conntrack_irc and
> modprobe ip_nat_irc if you do NAT too).
> 
> For others, you'll have to find a protocol helper,
> which is not included
> in the "standard" kernels (I'm not even sure they
> exist).
> 
> But I use ICQ through a netfilter-powered gateway
> that does NAT and 
> firewalling, and it seems to work
> 
> -- 
> Gael Le Mignot "Kilobug" - kilobug@freesurf.fr -
> http://kilobug.free.fr
> GSM         : 06.71.47.18.22 (in France)   ICQ UIN  
> : 7299959
> Fingerprint : 1F2C 9804 7505 79DF 95E6 7323 B66B
> F67B 7103 C5DA
> 
> Member of HurdFr: http://hurdfr.org - The GNU Hurd:
> http://hurd.gnu.org
> 


__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com

Re: Nobody can help me ??? :(

[Gaël Le Mignot]

Mon, 30 Sep 2002 08:01:38 -0700 (PDT), tu as dit : 

 > Thanx Gael for your useful answer, and thanx for those
 > who tried to help.

:)

 > But what is this "netfilter-powered gateway that does
 > NAT and firewalling" u are using ? and where to find
 > it ?

Just an old PII-400 running a debian woody and using netfilter to share
an ADSL connection for the other computers of the house... (and doing some
firewalling too, to protect them).

bye
-- 
Gael Le Mignot "Kilobug" - kilobug@freesurf.fr - http://kilobug.free.fr
GSM         : 06.71.47.18.22 (in France)   ICQ UIN   : 7299959
Fingerprint : 1F2C 9804 7505 79DF 95E6 7323 B66B F67B 7103 C5DA

Member of HurdFr: http://hurdfr.org - The GNU Hurd: http://hurd.gnu.org

Re: Nobody can help me ??? :(

[Michael]

Hanz F. wrote:

>HI
>I've posted an email asking for help, but got no
>answer !! Isn't this mailing list usefull for new
>members or what ??
>All I need is to run all kind of softwares (IRC, ICQ,
>yahoo messenger ,.....) through Netfilter , isn't that
>possible ???
>Thanks to whom will answer me.
>
Possible modules to load : 


modprobe ip_conntrack_ftp
modprobe ip_conntrack_irc
modprobe ip_nat_ftp
modprobe ip_nat_irc

I suggest you go look for IPtables Howtoo as this stuff is covered there 
somewhere. A good book might help too.

Some applications may not work without effort, and some may never 
work...Some applications need setting up from client end to work through 
firewall.

In all cases, since you are in control, you need to investigate what is 
needed (Ports, protocols supported by applications etc).

Another way to do it is to search for some firewalls already setup 
(sourceforge has some projects..) and use that. But always test the 
firewalls first...

Cheers,
Michael