2005-12-07, 09:05 PM
I've got iptables (with just about all the options) built into the kernel.
I clear the firewall:
iptables -F
iptables -t nat -F
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
(On the firewall/router) I start iptraf, then start irssi, /connect dalnet, all that happens in iptraf is:
┌{eth1ip}:60267 = 3 180 S--- eth1
└{dalnet}:6667 = 0 0 ---- eth1
eth1 is the internet connected nic.
midentd is listening on 113
I've tried using a client on my home network, but it doesn't make it through the router either.
In an iptables config file here I noticed:
Code:
IRCPORTS="6665,6666,6667,6668,6669,7000" #IRC Ports
...
/sbin/modprobe ip_conntrack_irc ports=$IRCPORTS
/sbin/modprobe ip_nat_irc ports=$IRCPORTS
But I have those modules built into the kernel - do they need those parameters, and how do I pass them if I don't have the modules? Or do these not work if built into the kernel?
Gentoo 2005.1 i386
Otherwise, firewall/router seems to work fine - I can access http on on the router, and http/ssh/ftp/counter-strike all get thru the router just fine.