/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */


Hi all.

I read the masquerading faq but I cannot solve my problem. So I search for 
help within this list.
I have a small LAN with dynamic IP assigning. The LAN consists of  a linux 
router (kernel 2.2.5, Suse 6.1) and two window PCs.
Standard masquerading works perfectly.
Now I have to use a non standard service from Interactive Brokers 
(www.interacivebrokers.com).
They have a special program for buying/selling contracts.
Each customer gets its own UDP and TCP ports for communicatin with the IB 
firewall.
They wrote:
"The Interactive Brokers' Trader Workstation needs to establish two
communication channels to IB's firewall. One of these channels uses TCP
and the other one uses UDP as the underlying communication protocol. Since
the UDP source and destination ports and the TCP destination port are
checked for at the IB firewall, it is the customer's responsibility to set
up the necessary translation services (proxies) on his/her firewall as
described here.
source UDP port:  59341
destination UDP port:  59379
destination TCP port; 1997-2000
destination IP address: 208.245.107.3"

There TCP/IP client program tries to connect to IB with udp packets on port 
59379. I see the packets arriving the router over eth0 but they are not 
forwarded over ippp0.
I tried to use ipmasqadm without success. I did the following:
ipmasqadm portfw -f
ipmasqadm portfw -a -P udp -L 208.245.107.3 59379 -R 192.168.1.1 59379

No packets appear at ippp0. 192.168.1.1 is one of the local window PCs.

I tried some other combinations with ipmasqadm, but all failed.

I actually do not know if I can and how to setup the masquerading so that 
the ports will be properly forwarded. Or must I write a new module which 
supports these special ports??

Perhaps someone can help me setting up the masquerading to resolve the 
problem.

Thank you very much,
Carsten

-----------------------------------------------------------------------
Carsten Wolters
e-mail: [EMAIL PROTECTED]
ICQ: 4178665

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES 
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to