Hi list,
I'm new to Linux; I started for the purpose of setting up a masq server for
our home LAN. Everything's going great except for ICQ.
We run 3 ICQ clients on the LAN. Without ipportfw, a single ICQ *not*
configured for firewall seemed to work fine. I guess it & the ICQ server
just used default ports which were masqueraded by the Linux server?
Since adding the second & third ICQ's it hasn't worked well. Each client
seems to establish its connection. But outgoing traffic (messages &
requests for user authorization) are getting lost.
Incoming traffic, OTOH, is working. Pager messages from the Web or e-mail
(wwp.icq.com and pager.mirabilis.com respectively) are being received
reliably: every one we've sent arrives immediately. Note the difference:
pager messages aren't sent through the ICQ clients. Therefore I'm thinking
this is a firewall or masq problem.
My firewall script (for PPP with dynamic IP) is adapted from David's
TrinityOS.wri. One minor change was that I specified LAN hosts for masq
rather than enabling it for the entire $intnet. (My reasoning is that when
we set up a machine for the children, we might want to limit their access
to the Internet.) My script is in /etc/ppp/ip-up .
I also added ipportfw sections for each of the 3 ICQ client hosts. I've
specified a range of 12 ports for each, using discrete ports (each hosts'
LAN IP's 4th octet + 01-12.) The corresponding ranges were entered into
the ICQ settings. ICQ's firewall test reports "success." The forwarded
ports are listed correctly by ipportfw -L .
I'm using the Slackware 3.6 "ZipSlack" distribution, which I have converted
from UMSDOS to native Linux partitions. I obtained the ipportfw patch and
executable, and compiled a customized 2.0.36 kernel with ipportfw. (The
ZipSlack distribution comes with a 2.0.35 kernel. Could this be a kernel
incompatibility issue? Might I need updated net apps?)
Last thing I can think of to add here is that running "dmesg" lists
bunches of "MASQ: failed TCP/UDP checksum from [IP-numbers]!" errors.
According to nslookup many of these are from the ICQ server. Are these
perhaps our missing ICQ messages?
If anyone can point me in the right direction we'd sure appreciate it. We
may be losing some external ICQ messages which are probably important.
Please let me know if I need to provide more information (keep in mind
that I'm completely new to all this Linux & TCP/IP stuff, sorry!)
Thanks,
Rob McGee
[EMAIL PROTECTED]
PS: I'm on the list digest, so I'd also appreciate a cc: of replies.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
