Firewall doesn't let MSN Connect in GAIM-0.77.

rhawi · 05-08-2004, 01:32 PM

I'm trying to build up my firewall configuration.
And then, I've tried to put a rule, in my iptables configuration, for GAIM.

Code:

iptables -t filter -A INPUT -p tcp --sport 1853 -j ACCEPT

but it doesn't work. When I run GAIM icq behave just fine but with msn protocol it is not the same.

Some one knows what is this ?

Thanks a lot.

ps. I also put as the first line iptables -t filter -P INPUT DROP.

Edaph · 05-09-2004, 11:45 AM

MSN uses port 1863 for communication, so you should generally use following rules for accepting MSN traffic.

# MSN outgoing
# This is only needed if you're restricting OUTGOING traffic
iptables -A OUTPUT -o $INTERNET_INTERFACE -p tcp -m state --state NEW,ESTABLISHED -s $INTERNET_IP --source-port 1024:65535 --destination-port 1863 -j ACCEPT

# MSN incoming
iptables -A INPUT -i $INTERNET_INTERFACE -p tcp --state ESTABLISHED,RELATED --source-port 1863 -d $INTERNET_IP --destination-port 1024:65535 -j ACCEPT

Where $INTERNET_INTERFACE should be the name of the interface connected to the internet i.e. "eth0" and $INTERNET_IP should be the ip address of the interface.

Regards,
Edaph