Click to See Complete Forum and Search --> : Can someone please help me with my firewall?


jfall
11-27-2002, 04:07 PM
I have an IPtables firewall running. My linux computer has two network cards. One is for my DSL and the other one is for a gateway so I have interent access on my two other Win XP computers.

Anyways, the firewall is working great except I have two small problems that I would like to fix with it. The first problem is I cannot send any files through MSN messenger. And the second is it takes like 2-3 minutes to connect to an IRC server.

Here is my whole firewall script: http://www.jaymefall.com/firewall.txt

If anyone would be so kind as to take a look through it and see if there is anything in there that can be changed to correct this problem it would be greatly appreciated. I really don't know what to look for.

Thanks,

janet loves bill
11-28-2002, 01:43 AM
http://www.linuxnewbie.org/forum/showthread.php?s=&threadid=69652&highlight=microsoft
read this thread, It appears you can't send files/attachments unless your are using IE. Typical M$

phlipant
11-28-2002, 11:35 AM
echo 1 > /proc/sys/net/ipv4/ip_forward # Enables packet forwarding
echo 1 > /proc/sys/net/ipv4/tcp_syncookies # spoof and DOS
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter # source address verification
echo 1 > /proc/sys/net/ipv4/conf/eth0/rp_filter # source address verification
echo 1 > /proc/sys/net/ipv4/conf/eth1/rp_filter # source address verification


# Delete and flush. Default table is "filter". Others like "nat" must be explicitly stated.
iptables --flush # Flush all the rules in filter and nat tables
iptables --table nat --flush
iptables --delete-chain # Delete all chains that are not in default filter and nat table
iptables --table nat --delete-chain

# Set up IP FORWARDing and Masquerading
iptables --table nat --append POSTROUTING --out-interface eth0 -j MASQUERADE
iptables --append FORWARD --in-interface eth1 -j ACCEPT
iptables -A OUTPUT -m state -p icmp --state INVALID -j DROP



where eth0 ->dsl
where eth1->gateway

JohnT
11-28-2002, 12:02 PM
Guarddog allows you to set Messenger with one click.

http://www.simonzone.com/software/guarddog/

jfall
11-28-2002, 12:10 PM
OK well first of all.. I am using IE ... and I can attach files with hotmail no problem. It's just when I try to send a file to another user on MSN Messenger.

I thought this was due to the firewall, but now it doesn't appear so. If I disable the firewall, it still does not work. So it must be a problem with NAT.


However the thing with MIRC is to do with the firewall. If my firewall is on, it takes me like 1-2 minutes to connect to a server, if I shut it down, it connects in a couple of seconds.