FC 6 router problem

titel · 01-02-2007, 11:41 AM

Hi everybody,

I have an FC6 router and I'm trying to make it possible for the client computers (Win XP) to connect to LimeWire network. Limewire requires 26108 port to be open and Limewire client works fine on the linux box itself but I can't get it to work on the win client.

Here is my current iptables configuration file

Code:

# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -p tcp -m multiport --dports 53,443,80 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -p udp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5800 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5900 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 26108 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

Any help is welcomed,
titel

Brian1 · 01-02-2007, 04:24 PM

Since the port is open you need to redirect it to the internal machine.

/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 26108 -j DNAT --to yyy.yyy.yyy.yyy:26108

This is is based on eth0 being your external nic. Replace yyy.yyy.yyy.yyy with the internal lan ip of the windows machine. For this to stay consistent the lan machine ip must be statically defined. Now doing this will cause the fc6 box not to be able to use the port 26108 since it is being redirected to the lan machine now. I know nothing about limewire so if one can use different ports. Then the fc box could use a different port or you can redierct it to the lan machine. If multiple ports can be used then one can let the fc6 box use port 26108 and if maybe port 26109 can be used then one can redirect eternal ip, port 26109 to internal ip, port 26108.

Brian