Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 01-24-2002, 04:09 PM   #1
LQ Newbie
Registered: Jan 2002
Posts: 16

Rep: Reputation: 0
Question using a WebCam on iFriends across an IPCHAINS firewall

Has anyone been able too make streaming video on iFriends
work across a IPCHAINS firewall?

Im using 2.2.20, seawall 4.01 (ipchains firewall), ipmasqadm-0.4.2-4.

The default streaming video port is 8080.

Essentially the iFriends server is trying to connect to port 8080 on the external address of my firewall, ie:

How do i redirect this request to my internal machine??
ie: >>>>

Will the responding video packets contain my private packets
as a result? If so, will MASQ process these packets aswell?

any response would be groovy
Old 01-30-2002, 04:48 AM   #2
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
I haven't tried ifriends on ipchains but try the following.

Install the module for Port forwarding and tell your firewall to forward any inbound tcp/udp connections to the internal ip port 8080 address.

modprobe ip_masq_portfw
ipmasqadm portfw -a -P tcp -L firewalls_ip 8080 -R internal_address 8080
ipmasqadm portfw -a -P udp -L firewalls_ip 8080 -R _internal_address 8080

Then set your ipchains rules as follows.
ipchains -A input -p tcp -s 0/0 --sport 1023:65535 -d firewalls_ip_address --dport 8080 -j ACCEPT
ipchains -A output -p tcp -s firewalls_ip_address --sport 8080 -d 0/0 -j ACCEPT
ipchains -A input -p udp -s 0/0 --sport 1023:65535 -d firewalls_ip_address --dport 8080 -j ACCEPT
ipchains -A output -p udp -s firewalls_ip_address --sport 8080 -d 0/0 -j ACCEPT

If it doesn't work it cause the client responds to the server while changing it's port address dynamically, then server then responds back and the firewall drops it cause it don't understand why the inbound port location has changed, i.e a module is need like for IRQ and IRC and ACTIVE ftp etc etc.

Old 01-30-2002, 11:35 AM   #3
Registered: Jan 2002
Location: Kansas City
Distribution: RedHat 7.2 Kernel 2.4.17
Posts: 250

Rep: Reputation: 30
I'll tell you ..... for a free account to iFriends..
Old 01-30-2002, 04:03 PM   #4
LQ Newbie
Registered: Jan 2002
Posts: 16

Original Poster
Rep: Reputation: 0
cant give u a free one...not allowed...
but im sure we can work something out

so u have really got this working?
Old 01-31-2002, 10:05 AM   #5
Registered: Apr 2001
Location: London
Posts: 408

Rep: Reputation: 31
Originally posted by ryanstrayer
I'll tell you ..... for a free account to iFriends..
This is a free forum.

We don't expect payment for answering questions.
So either add something constructive or not at all.



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Firewall Ipchains initpcsys Linux - Security 1 06-22-2003 06:35 PM
VPN through IPchains firewall snowdog12 Linux - Networking 1 04-26-2003 07:06 PM
ifriends webcam help (newbie) benfriend Linux - Security 2 03-02-2002 12:31 PM
Need help with ipchains firewall tarballedtux Linux - Security 3 12-01-2001 07:11 AM
ipchains firewall question simon Linux - Security 1 08-08-2001 06:58 AM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:36 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration