From owner-freebsd-stable Thu Sep 21 8:34:13 2000 Delivered-To: freebsd-stable@freebsd.org Received: from lunatic.oneinsane.net (lunatic.oneinsane.net [207.113.133.231]) by hub.freebsd.org (Postfix) with ESMTP id 2AD8F37B422 for ; Thu, 21 Sep 2000 08:34:00 -0700 (PDT) Received: by lunatic.oneinsane.net (Postfix, from userid 1000) id 9BB6715551; Thu, 21 Sep 2000 08:33:49 -0700 (PDT) Date: Thu, 21 Sep 2000 08:33:49 -0700 From: Ron 'The InSaNe One' Rosson To: freebsd-stable@freebsd.org Subject: Re: ICQ behind natd masquerade Message-ID: <20000921083348.B65154@lunatic.oneinsane.net> Reply-To: Ron Rosson Mail-Followup-To: freebsd-stable@freebsd.org References: <5.0.0.25.2.20000921083515.00a9aad0@10.0.0.55> <969526426.39c9cc9ac0952@webmail.harmonic.co.il> <20000921150843.A12529@cipher.home.at> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20000921150843.A12529@cipher.home.at>; from bernhard.valenti@gmx.net on Thu, Sep 21, 2000 at 03:08:43PM +0200 X-Operating-System: FreeBSD lunatic.oneinsane.net 4.1-STABLE X-Moon: The Moon is Waning Crescent (45% of Full) X-Opinion: What you read here is my IMHO X-WWW: http://www.oneinsane.net X-GPG-FINGERPRINT: 3F11 DB43 F080 C037 96F0 F8D3 5BD2 652B 171C 86DB X-Uptime: 8:32AM up 6 days, 21:14, 1 user, load averages: 1.12, 1.08, 1.06 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Bernhard Valenti (bernhard.valenti@gmx.net) wrote: > sounds plausible.. > i changed the timeout for UDP to 600 seconds ( i took a look at the linux icq masq module and that uses 600 too ) > in /usr/src/lib/libalias/alias_db.c line 159 > > maybe its possible to only increase the timeout out for icq ? > cause i guess a timeout of 600 can easily flood the table ? > > regards, > bernhard valenti > > On Thu, Sep 21, 2000 at 10:53:46AM +0200, Roman Shterenzon wrote: > > Just my 0.02$; > > The ICQ is uses udp to contact the server; perhaps the natd "forgets" about > > your icq session when the interval between the packets is too great? > > maybe you need to decrease the interval in icq or increase some timeout > > in natd. > > However I have no idea if my theory is right, guys, anyone, opinion? > Another option would be to install socks5 on the NAT server and run ICQ with socks5 support and see what happens. Just a thought -- ------------------------------------------------------------------------------ Ron Rosson ... and a UNIX user said ... The InSaNe One rm -rf * insane@oneinsane.net and all was /dev/null and *void() ------------------------------------------------------------------------------ Time spent at cons does not count against your lifespan. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message