Date: Thu, 21 Mar 2002 09:40:27 -0500 From: "Sandro Mancuso" <sandromancuso@hotmail.com> To: "'agusri dodi'" <dodix2000@yahoo.com>, <SimsS@IBM.net> Cc: <questions@FreeBSD.org> Subject: RE: Firewall Rule for IRC Message-ID: <000a01c1d0e6$576c37d0$e83dfea9@windows> In-Reply-To: <20020321095937.37447.qmail@web20605.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
>-----Original Message----- >From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd- >questions@FreeBSD.ORG] On Behalf Of agusri dodi > >I am using Natd to connect my LAN to Internet.Web and >FTP work well but my client can not use IRC services > Do you mean you can't access the servers at all or you are not allowed to complete a connection to them? >here is the content of my configuration file > >RC.CONF : >gateway_enable="YES" >natd_enable="YES" >natd_interface="fxp0" > >natd_flags="-f /etc/natd.conf" > > >firewall_enable="NO" > > Did you install identd from ports? >THE CONTENT OF RC.lOCAL FILE : > >echo 'Starting Firewall' >/sbin/ipfw -f flush >/sbin/ipfw add divert natd all from any to any via >fxp0 > ># My Local Network (my netwrok interface (INTEL) >/sbin/ipfw add allow ip from >192.168.0.0:255.255.255.0 to any via fxp0 > >#Allow INDENT >/sbin/ipfw add allow log tcp from any to any 194 in >recv fxp0 setup > >#Allow IRC >/sbin/ipfw add allow log tcp from any to any 113 in >recv fxp0 setup > > >#Deny X >/sbin/ipfw add 00300 deny log tcp from any to any 6000 >in recv fxp0 > ># DNS of my ISP >/sbin/ipfw add allow tcp from 202.134.0.155 to any >in recv fxp0 >/sbin/ipfw add allow tcp from 202.134.2.5 to any in >recv fxp0 > >/sbin/ipfw add allow udp from 202.134.0.155 to any >in recv fxp0 >/sbin/ipfw add allow udp from 202.134.2.5 to any in >recv fxp0 > > >/sbin/ipfw add pass all from any to any > > >echo 'Starting Natd ' >natd -n fxp0 -f /etc/natd.conf > > >echo 'Starting Boa ' >boa > Now, I'm not all that familiar with ipfw. Here's what I do to connect to IRC though: If your default outgoing is to block, make sure ports 6667-6669 at least are open. Next, its not enough to just open port 113, you have to have identd running (its in the ports, under "IRC" if I'm not mistaken) If you are trying to connect from a machine behind this firewall/router then you have to either redirect port 113 to the computer behind the firewall (I don't know how in natd, ipnat uses a simple rdr command... must be similar) or, what you can do is run a bnc (irc bouncer) on the firewall box and connect to that and then to IRC from there > >THE CONTENT OF NATD.CONF FILE : >interface fxp0 >use_sockets yes >same_ports yes > >What should I do ? >Is there any setting for IRC client ? > >thank for reply > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000a01c1d0e6$576c37d0$e83dfea9>