netfilter-bounces@xxxxxxxxxxxxxxxxxxx wrote: > Hello. > I have some clients in my LAN that need to access ICQ and MSN > Messenger. Reading some iptables tutorials, I discovered that ICQ and > MSN Messenger protocols are some kind of "complex protocols" > because they send some information about openning new > connections back inside the payload of the packets. > So, iptables needs some CONNTRACK and/or NAT helpers to let this > protocols work properly. I looked for it on NETFILTER home page but I > didn't find it. So, I need some help about it! AFAIK, there are no ICQ or MSN helpers for Netfilter. You can use portforwarding for one ICQ or MSN client for direct access like filetransfer. OTOH if you want to use these capabilities with multiple clients you could setup a socks proxy, like the old one from NEC (the source should be available somewhere), and configure the clients to use it. Gr, Rob