LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 01-24-2002, 03:09 PM   #1
Pauly
LQ Newbie
 
Registered: Jan 2002
Posts: 16

Rep: Reputation: 0
Question using a WebCam on iFriends across an IPCHAINS firewall


Has anyone been able too make streaming video on iFriends
work across a IPCHAINS firewall?

Im using 2.2.20, seawall 4.01 (ipchains firewall), ipmasqadm-0.4.2-4.

The default streaming video port is 8080.

Essentially the iFriends server is trying to connect to port 8080 on the external address of my firewall, ie: 24.65.105.22:8080

How do i redirect this request to my internal machine??
ie: 24.65.105.22:8080 >>>> 192.168.0.10:8080

Will the responding video packets contain my private packets
as a result? If so, will MASQ process these packets aswell?

any response would be groovy
 
Old 01-30-2002, 03:48 AM   #2
raz
Member
 
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
I haven't tried ifriends on ipchains but try the following.

Install the module for Port forwarding and tell your firewall to forward any inbound tcp/udp connections to the internal ip port 8080 address.

example:
modprobe ip_masq_portfw
ipmasqadm portfw -a -P tcp -L firewalls_ip 8080 -R internal_address 8080
ipmasqadm portfw -a -P udp -L firewalls_ip 8080 -R _internal_address 8080

Then set your ipchains rules as follows.
ipchains -A input -p tcp -s 0/0 --sport 1023:65535 -d firewalls_ip_address --dport 8080 -j ACCEPT
ipchains -A output -p tcp -s firewalls_ip_address --sport 8080 -d 0/0 -j ACCEPT
ipchains -A input -p udp -s 0/0 --sport 1023:65535 -d firewalls_ip_address --dport 8080 -j ACCEPT
ipchains -A output -p udp -s firewalls_ip_address --sport 8080 -d 0/0 -j ACCEPT

If it doesn't work it cause the client responds to the server while changing it's port address dynamically, then server then responds back and the firewall drops it cause it don't understand why the inbound port location has changed, i.e a module is need like for IRQ and IRC and ACTIVE ftp etc etc.

/Raz
 
Old 01-30-2002, 10:35 AM   #3
ryanstrayer
Member
 
Registered: Jan 2002
Location: Kansas City
Distribution: RedHat 7.2 Kernel 2.4.17
Posts: 250

Rep: Reputation: 30
I'll tell you ..... for a free account to iFriends..
 
Old 01-30-2002, 03:03 PM   #4
Pauly
LQ Newbie
 
Registered: Jan 2002
Posts: 16

Original Poster
Rep: Reputation: 0
cant give u a free one...not allowed...
but im sure we can work something out

so u have really got this working?
 
Old 01-31-2002, 09:05 AM   #5
raz
Member
 
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
Quote:
Originally posted by ryanstrayer
I'll tell you ..... for a free account to iFriends..
This is a free forum.

We don't expect payment for answering questions.
So either add something constructive or not at all.

/Raz
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Firewall Ipchains initpcsys Linux - Security 1 06-22-2003 05:35 PM
VPN through IPchains firewall snowdog12 Linux - Networking 1 04-26-2003 06:06 PM
ifriends webcam help (newbie) benfriend Linux - Security 2 03-02-2002 11:31 AM
Need help with ipchains firewall tarballedtux Linux - Security 3 12-01-2001 06:11 AM
ipchains firewall question simon Linux - Security 1 08-08-2001 05:58 AM


All times are GMT -5. The time now is 11:33 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration