[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: masquerading woes with icq



Mulix,
I was looking into the same problem... The issue is that developers of
2.4 netfilter code agree to write specific modules for protocols only
when GPL-ed client and server software exist. There is no free ICQ
server, so such module does not exist. Since ICQ protocol is
brain-damaged (they encode the sending IP inside the data packet
itself), it won't work property out of the box... The solution I found
working is this:

1. Get more or less modern ICQ client
2. In recent versions you can specify range of upper ports which ICQ
will use, in the client.
3. use iptables to forward all requests to these ports directly to your
windows machine. 
4. Yes I know this jeopardizes security, but anything else won't really
work for me.

You can try to use different approaches, like using HTTP proxy mode in
ICQ, but without direct connection people won't be able to chat you, and
other problems will exist also. If you find better solution then above,
please let me know.

Haim.

> -----Original Message-----
> From: linux-il-bounce@cs.huji.ac.il 
> [mailto:linux-il-bounce@cs.huji.ac.il] On Behalf Of mulix
> Sent: Monday, November 05, 2001 12:31 AM
> To: Hetz Ben Hamo
> Cc: linux-il@linux.org.il
> Subject: Re: masquerading woes with icq
> 
> 
> On Mon, 5 Nov 2001, Hetz Ben Hamo wrote:
> 
> > Use this module on your Linux gateway:
> >
> > 
> http://rpmfind.net/linux/RPM/PLDtest/i386/ip_masq_icq->
0.56-1.i386.html
> 
> sorry, hetz, but this module is for 2.2.x kernels and, as i mentioned,
> my gateway is running 2.4.x. downgrading the kernel is not an option.
> (it's not only a  ateway, it's one of my kernel development 
> machines as
> well. here at casa mulix, all machines multitask).
> 
> -- 
> mulix
> 
> http://www.pointer.co.il/~mulix/
> http://syscalltrack.sf.net/
> 
> 
> 
> =================================================================
> To unsubscribe, send mail to linux-il-request@linux.org.il with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail linux-il-request@linux.org.il
> 
> 
> 


To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il