Re: irc+iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 2004-10-02 at 05:03, it clown wrote:
> Hi All,
> 
> i am having some trouble in getting irc working through
> iptables and squid.When i put a forwarder in my iptables
> rule i can connect to irc but when i want to go through the
> proxy i have no luck.I have loaded the ip_nat_irc and
> tried:
> 
> -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT
> --to-ports 3128.

which is a nat rule redirecting tcp port 80 traffic to your squid cache
running on tcp port 3128.

> I have made the changes in squid to allown port 6667.
> Port 6667 is allowed OUT.

what has has led you to believe that squid can proxy IRC traffic?  i may
be out of the loop, but AFAIK, squid supports proxying for:  HTTP,
HTTPS, FTP, Gopher, and WAIS.

even if it did support proxying for IRC, you're only redirecting port
80.

for IRC, you'll need to use a forward rule along the lines of:

  iptables -A FORWARD -i $INSIDE_IF -p tcp --syn --dport 6667 -j ACCEPT

HTH...

-j

disclaimer:  the rules contained in this message are meant to illustrate
the requested functionality only, and not intended as a recommendation
of best practices.  never execute any commands without fully
understanding the implications.

-- 
Jason Opperisano <opie@xxxxxxxxxxx>



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux