Skip to contentSkip to conversation

allow DCC through iptables nat box

DISCUSSION Lars Nielsen 3 participants 3 messages Aug 29, 2005

lore
Share & tools
lore
#0 lore raw

Hey

I have the following setup:

LAN 192.168.1.0/24
Linux box with iptables

      eth0   192.168.1.1
      eth1   ext_ip

internet

I use the following to allow internal clients to access the internet. iptables -t nat -A POSTROUTING -o eth1 -s 192.168.1.0/24 -d 0/0 -j MASQUERADE

Which rules should i use to allow DCC to and from an internal Mirc client on ip 192.168.1.2

I hope you can help me! ;o)

Best regards Lars Nielsen

#1 lore raw

You can use Patch O Matic module

5.4 irc-conntrack-nat patch

This patch by Harald Welte <[email protected]> allows DCC to work though NAT and connection tracking. By default, this module will track IRC connection on port 6667. But you can change this for another port with the `ports=xx' argument.

http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-5.html#ss5.4

Regards,

Sp0oKeR

Quoted 23 lines · Lars Nielsen

Hey

I have the following setup:

LAN 192.168.1.0/24
Linux box with iptables

       eth0   192.168.1.1
       eth1   ext_ip

internet

I use the following to allow internal clients to access the internet. iptables -t nat -A POSTROUTING -o eth1 -s 192.168.1.0/24 -d 0/0 -j MASQUERADE

Which rules should i use to allow DCC to and from an internal Mirc client on ip 192.168.1.2

I hope you can help me! ;o)

Best regards Lars Nielsen

#2 lore raw

I think this module is included in 2.6 kernel trees, isn't it? Please correct me if i'm wrong... Thank you!

Quoted 43 lines · Sp0oKeR wrote:

You can use Patch O Matic module

5.4 irc-conntrack-nat patch

This patch by Harald Welte <[email protected]> allows DCC to work though NAT and connection tracking. By default, this module will track IRC connection on port 6667. But you can change this for another port with the `ports=xx' argument.

http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-5.html#ss5.4

Regards,

Sp0oKeR

Quoted 23 lines · Lars Nielsen

Hey

I have the following setup:

LAN 192.168.1.0/24
Linux box with iptables

      eth0   192.168.1.1
      eth1   ext_ip

internet

I use the following to allow internal clients to access the internet. iptables -t nat -A POSTROUTING -o eth1 -s 192.168.1.0/24 -d 0/0 -j MASQUERADE

Which rules should i use to allow DCC to and from an internal Mirc client on ip 192.168.1.2

I hope you can help me! ;o)

Best regards Lars Nielsen