It was a Squid problem. Squid had disabled several applications. Once I enabled those web apps, Windows Update worked fine. Thanks for the suggestion, even though this wasn't an IP tables issue. Register your team online today! BOWL FOR KIDS'SAKE 2004 Saturday, March 6, 2004 www.bfkscentralohio.org You'll be "bowled over" when our brochure "strikes" your mailbox at the end of January.sorry.we couldn't help ourselves! If you do not receive one, please contact me! ============================================================== Chris Baker -- technical specialist 614-839-2447x108 -- cbaker@xxxxxxxxxxxxxxxxxxx www.bbbscentralohio.org -- Big Brothers Big Sisters of Central Ohio Opinions expressed in this e-mail are solely my own. The document(s) accompanying or within this email transmission may contain confidential information belonging to Big Brothers Big Sisters of Central Ohio, which is legally privileged for the entity named above. If you are not the intended recipient, you are hereby cautioned that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this email information is strictly prohibited. If you receive this email in error, please notify us immediately by fax (614-839-5437) or phone (614-839-2447) to advise of the error. -----Original Message----- From: Ray Anderson [mailto:rsa@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, February 11, 2004 2:56 PM To: Chris Baker; netfilter@xxxxxxxxxxxxxxxxxxx Subject: RE: Windows Update through Mandrake firewall I have no problems updating several Windows machines behind a Mandrake machine with iptables. I do NOT have squid running, and only run the standard iptables suite vs. the canned Mandrake firewall. I do not believe this is an iptables issue, but perhaps something else Mandrake has done with their firewall setup. My rules are very simple, and were obtained by following the tutorial from Oskar (http://iptables-tutorial.frozentux.net/iptables-tutorial.html) I go back to this document often, and seem to glean something new from it each time. (Thanks Oskar!) You shouldn't have to have any ports open, but should use snat from the internal machines to your external ip address, and dnat from the external ip address to the related,established ports. That should be it. -=Ray --------------------------------------- He who gets excited in fighting is sure to make mistakes. Baron Manfred von Richthofen > -----Original Message----- > From: netfilter-admin@xxxxxxxxxxxxxxxxxxx > [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] On Behalf Of > cbaker@xxxxxxxxxxxxxxxxxxx > Sent: Wednesday, February 11, 2004 11:03 AM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: Windows Update through Mandrake firewall > > > I am having trouble running Windows Update through a Mandrake > Multi Network Firewall. I have already asked for help in > several other > forums. > > I am able to browse other web sites just fine. The Windows > Update site > appears to fail up when I checks my PC for updates. Microsoft's site > support site said that I should "disable the firewall." > > What ports do I need to open? What rules do I need to have? Could > this be a Squid issue (our web proxy server)? > > Thanks, > > Chris > > > ======================================== > Chris Baker -- technical specialist > 614-839-2447x108 > cbaker@xxxxxxxxxxxxxxxxxxx > Big Brothers Big Sisters of Central Ohio > www.bbbscentralohio.org > Opinions expressed in this e-mail are solely my own. > >
