From: "wickedsun" <wickedsun@phreaker.net>
To: afu@fugmann.dhs.org
Cc: netfilter <netfilter@lists.netfilter.org>
Subject: Re: Is iptables kickin' that much?
Date: Fri, 6 Sep 2002 22:12:16 -0400 (Eastern Daylight Time) [thread overview]
Message-ID: <3D796080.000001.00644@athlon1000> (raw)
In-Reply-To: 3D793DE4.2060504@fugmann.dhs.org
[-- Attachment #1: Type: Text/Plain, Size: 1717 bytes --]
DC++ is a Direct Connect client. You can use either Passive or Active mode.
It's just like FTP. In passive you get the search responces from the server
where as Active, the users send you the responces directly thru port 1412. I
used to have to map the ports, but after flushing my forwards and adding
your rules to my IPtables, it worked.
Look on sourceforge for DC++.
-------Original Message-------
From: Anders Fugmann
Date: Friday, September 06, 2002 7:52:52 PM
To: wickedsun
Cc: netfilter
Subject: Re: Is iptables kickin' that much?
wickedsun wrote:
> thing to say, it works.
Great.
> Now the question is, will this work with any
> protocol? (ftp, irc, etc).
as of today, only ftp and IRC is implemented in the vanilla tree. POM
may have connection tracking for other protocols.
A protocol that requests something and then receives an answer is
handled by basic connection tracking (Which is why you dont need
connection tracking modules for e.g. http and pop, since no new
connection are established). It is the RELATED packets that are hard to
find.
>The thing is scary me a bit. I read in your email
> that you have to load up a FTP module (which I have compiled in the
kernel)
> and it seems to me that it works with other protocol as well. (I was able
to
> enable Active in DC++ without having to forward manually each ports like I
> used to do).
Active DC++???? Never heard of it.
>
> This was of a huge help for the iptables newbies (including me) and thanks
No problem.
Regards
Anders Fugmann
--
Author of FIAIF
FIAIF Is An Intelligent Firewall
http://fiaif.fugmann.dhs.org
.
[-- Attachment #2: Type: Text/HTML, Size: 3394 bytes --]
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="IncrediMail 1.0" name=GENERATOR>
<!--IncrdiXMLRemarkStart>
<IncrdiX-Info>
<X-FID>FLAVOR00-NONE-0000-0000-000000000000</X-FID>
<X-FVER></X-FVER>
<X-CNT>;</X-CNT>
</IncrdiX-Info>
<IncrdiXMLRemarkEnd-->
</HEAD>
<BODY style="BACKGROUND-POSITION: 0px 0px; FONT-SIZE: 12pt; MARGIN: 5px 10px 10px; FONT-FAMILY: Arial" bgColor=#ffffff background="" scroll=yes ORGYPOS="0" X-FVER="3.0">
<TABLE id=INCREDIMAINTABLE cellSpacing=0 cellPadding=2 width="100%" border=0>
<TBODY>
<TR>
<TD id=INCREDITEXTREGION style="FONT-SIZE: 12pt; CURSOR: auto; FONT-FAMILY: Arial" width="100%">
<DIV>DC++ is a Direct Connect client. You can use either Passive or Active mode. It's just like FTP. In passive you get the search responces from the server where as Active, the users send you the responces directly thru port 1412. I used to have to map the ports, but after flushing my forwards and adding your rules to my IPtables, it worked.</DIV>
<DIV> </DIV>
<DIV>Look on sourceforge for DC++.<BR> </DIV>
<DIV id=IncrediOriginalMessage><I>-------Original Message-------</I></DIV>
<DIV> </DIV>
<DIV id=receivestrings>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>From:</B></I> <A href="mailto:afu@fugmann.dhs.org">Anders Fugmann</A></DIV>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>Date:</B></I> Friday, September 06, 2002 7:52:52 PM</DIV>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>To:</B></I> <A href="mailto:wickedsun@phreaker.net">wickedsun</A></DIV>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>Cc:</B></I> <A href="mailto:netfilter@lists.netfilter.org">netfilter</A></DIV>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>Subject:</B></I> Re: Is iptables kickin' that much?</DIV></DIV>
<DIV> </DIV>wickedsun wrote:<BR>> thing to say, it works. <BR>Great.<BR><BR>> Now the question is, will this work with any<BR>> protocol? (ftp, irc, etc). <BR>as of today, only ftp and IRC is implemented in the vanilla tree. POM <BR>may have connection tracking for other protocols.<BR><BR>A protocol that requests something and then receives an answer is <BR>handled by basic connection tracking (Which is why you dont need <BR>connection tracking modules for e.g. http and pop, since no new <BR>connection are established). It is the RELATED packets that are hard to <BR>find.<BR><BR>>The thing is scary me a bit. I read in your email<BR>> that you have to load up a FTP module (which I have compiled in the kernel)<BR>> and it seems to me that it works with other protocol as well. (I was able to<BR>> enable Active in DC++ without having to forward manually each ports like I<BR>> used to do).<BR>Active DC++???? Never heard of it.<BR><BR>> <BR>> This was of a huge help for the iptables newbies (including me) and thanks.<BR>No problem.<BR><BR>Regards<BR>Anders Fugmann<BR><BR>--<BR>Author of FIAIF<BR>FIAIF Is An Intelligent Firewall<BR><A href="http://fiaif.fugmann.dhs.org">http://fiaif.fugmann.dhs.org</A><BR><BR><BR><BR>. </TD></TR>
<TR>
<TD id=INCREDIFOOTER width="100%">
<TABLE cellSpacing=0 cellPadding=0 width="100%">
<TBODY>
<TR>
<TD width="100%"></TD>
<TD id=INCREDISOUND vAlign=bottom align=middle></TD>
<TD id=INCREDIANIM vAlign=bottom align=middle></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>
next prev parent reply other threads:[~2002-09-07 2:12 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-09-06 13:40 Is iptables kickin' that much? wickedsun
2002-09-06 23:44 ` Anders Fugmann
2002-09-07 2:12 ` wickedsun [this message]
2002-09-07 9:11 ` Anders Fugmann
2002-09-07 12:46 ` Mike D
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3D796080.000001.00644@athlon1000 \
--to=wickedsun@phreaker.net \
--cc=afu@fugmann.dhs.org \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox