[ILUG] etrn & ipchains

[gerodonoghue at sigma-sl.ie]

Ger Donohue wrote:

Stephen
Configured my ipchains input rule to accept connections only from
external mail server and used ipmasqadm portfw and it worked. Thanks for
your help on the matter my problem was with my input chain. I had
transparent proxy complied in my kernel and I will have a look tproxy
later next week. For now I am going to let it run and see if any
problems arise. (So far none).
Other issues I encoutered in setting up dial up gateway which may be of
use to some people.
Had a lot of grief getting MLPPP working on dial up for ISDN. Changed my
Externel Modem/Router to DIVA/TA ISDN Modem and had no problem. This is
the best ISDN Modem/TA I have every used and it is made in Ireland.
DHCP
Scratched my head trying to figure out why NT DHCP server would not
assign new leases after I brought the gateway on the network. I was
trying to get it to send DNS and ROUTER information to client machines.
Eventually read somewhere that after you change global settings you must
restart the service.

Regards Ger


> On Wed, 6 Sep 2000 17:33:09 +0100 (IST)
> Stephen Shirley <diamond at csn.ul.ie>  wrote:
>
> | To do port-forwarding between machines, you need another package.
> | The one I used, and would reccomend, is tproxy, available at
> | ftp://ftp.nlc.net.au/pub/unix/transproxy/
>
> | Again, if you need any help with ipchains, or tproxy, just
> | send me a mail.
>
> Hmm, set up tproxy and ijb last night and was well impressed. What I'd
> like
> to know is, does anybody know of some good _transparent_ proxies for
> FTP,
> telnet etc? An ftp proxy that can do temporary IPchains rules and can
> handle active mode would be particularly neat..
>
> On a related note, where does portmapper derive the ports it assigns
> to
> things like nfsd? I suppose I could use cron and the output of rpcinfo
> to
> maintain a chain, put that feels... dirty.
>         Paul