On Fri, 4 Apr 2003, Raymond Norton wrote:
> I am using redhat 7.1 OS. with Ipchains 1.3.10. ( no masquerading), As
> I mentioned all users are using the proxy box for a gateway, and using
> port 8080 for http traffic (dans). I had added port 1863 in IPchains
> before posting (-A ipput -s 0/0 -d 0/0 1863 -p tcp -y -j ACCEPT).  In
> this case would the user need to set up proxy portion of msn, or
> should it just go through?

You'd need to configure the box to masquerade that port.. it's been a
*long* time since I've used ipchains, but it'd be something like:

-A INPUT -s 0/0 1863 -p tcp -y -j ACCEPT
-A OUTPUT -d 0/0 1863 -p tcp -j ACCEPT
-A FORWARD -s <int_ip_range>/<mask> -d 0/0 1863 -p tcp -j MASQ

Again, those are rules for something I haven't touched in years, so it
might be way off.  :)

-- 
Nate Carlson <natecars at real-time.com>   | Phone : (952)943-8700
http://www.real-time.com                | Fax   : (952)943-8500



_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list