<< Sorry voor de verneukte layout >>>
Ik krijg m'n Fserve maar niet aan de praat:
Client met WinXP+mIRC6.02(Excursion script) -> Router met Slack 8.1 (2.4.18) -> Internet.
Ik gebruik MonMotha's firewall script (firewall probleem?) en heb volgens mij alle modules:
root@tyson:/etc/rc.d# lsmod
Module Size Used by Not tainted
ip_nat_irc 2368 0 (unused)
iptable_mangle 2112 0 (autoclean) (unused)
ipt_REJECT 2784 11 (autoclean)
ipt_limit 960 29 (autoclean)
ipt_ULOG 3424 12 (autoclean)
ipt_MASQUERADE 1216 2 (autoclean)
ipt_LOG 3136 15 (autoclean)
ipt_state 608 4 (autoclean)
iptable_filter 1728 1 (autoclean)
ip_nat_ftp 2944 0 (unused)
iptable_nat 12660 3 [ip_nat_irc ipt_MASQUERADE ip_nat_ftp]
ip_conntrack_irc 2464 0 (unused)
ip_conntrack_ftp 3200 0 (unused)
ip_conntrack 12684 4 [ip_nat_irc ipt_MASQUERADE ipt_state ip_nat_ftp iptable_nat ip_conntrack_irc ip_conntrack_ftp]
ip_tables 10432 11 [iptable_mangle ipt_REJECT ipt_limit ipt_ULOG ipt_MASQUERADE ipt_LOG ipt_state iptable_filter iptable_nat]
ppp_synctty 4960 0 (unused)
ppp_async 6464 1
ppp_generic 14664 3 [ppp_synctty ppp_async]
slhc 4416 0 [ppp_generic]
ide-scsi 7456 0
8139too 13792 2
mii 1008 0 [8139too]
Timboke's tip werkt niet:
root@tyson:/etc/rc.d# /sbin/modprobe ip_nat_irc port=6667
/lib/modules/2.4.18/kernel/net/ipv4/netfilter/ip_nat_irc.o.gz: invalid parameter parm_port
/lib/modules/2.4.18/kernel/net/ipv4/netfilter/ip_nat_irc.o.gz: insmod /lib/modules/2.4.18/kernel/net/ipv4/netfilter/ip_nat_irc.o.gz failed
/lib/modules/2.4.18/kernel/net/ipv4/netfilter/ip_nat_irc.o.gz: insmod ip_nat_irc failed
modprobe ip_nat_irc zonder paramaters werkt wel.
In mIRC heb ik Localhost en IP Address ingevuld (athlonxp en 192.168.0.4), onder
On connect, always get: de opties Local Host en IP Address
uitgevinkt en Lookup method staat op Normal.
Weet iemand misschien waarom het nog niet werkt?
Onder heb ik nog ff m'n firewallscript geplaatst: <blockquote><font size="1" face="verdana, arial, helvetica">code:</font><hr><font face="courier, fixedsys, lucida console"><nobr>#!/bin/bash
# ----------------------------------------------------------------------|
# This is it...MonMotha's Firewall 2.3.8-pre7! |
# All your h4x0rZ are belong to Linux/Netfilter! |
# ----------------------------------------------------------------------|
# 2.3 RELEASE NOTES: This is the 2.2 series with some extra stuff, |
# including MAC address matching, stateful matching, port forwarding, |
# per-proto accept behavior, and some other stuff that I might think |
# about adding later. |
# ----------------------------------------------------------------------|
# COMMENTS from MonMotha: |
# |
# Please do not email me directly with usage questions. I don't have |
# the time or resources to keep up. Check the configuration help at |
# the URL posted below then post to the users list if you have any |
# further questions. |
# --MonMotha |
# |
# When emailing me or the mailing lists, keep in mind that HTML email |
# may be silently rejected as an anti-spam measure. Configure your UA |
# to use plain text for mail. |
# --MonMotha |
# |
# A list of known bugs can be found at: |
# http://www.mplug.org/phpwiki/index.php?MonMothaKnownBugs |
# please check this list before reporting bugs. Bugs can be reported |
# directly to me or to the devel mailing list. Please ask to be CCed |
# if you mail the devel list and are not a member. |
# --MonMotha |
# |
# Mailing lists are now available. See the distribution website at |
# <http://monmotha.mplug.org> for more info. |
# --MonMotha |
# |
# Note another change of my email address. New address is: |
# <monmotha@indy.rr.com>. Hopefully I can keep this one for a while. |
# --MonMotha |
# |
# I will be entering "feature freeze" when 2.3.8 goes final. Please |
# make sure to have any patches or feature requests in by then. |
# I expect 2.3.7 to be closing in on deserving the "stable" marking. |
# --MonMotha |
# |
# Please note the change of my e-mail address. The new address is: |
# obi-wan@starwarsfan.com. The old address (bvmopen@usa.net) will be |
# discontinued as of July 31, 2001. |
# --MonMotha |
# |
# When e-mailing to report a bug, please check first that it has not |
# already been fixed in the next prerelease (which can be found at the |
# distribution site). |
# --MonMotha |
# |
# Before e-mailing me, please check the distribution site (which can be |
# found at http://freshmeat.net/projects/mothafirewall as it changes |
# sometimes) for a new version. |
# --MonMotha |
# |
# Please...PLEASE give me feedback on your experiences with this script |
# I would really like to know what everyone wants, what works, and |
# about the inevitable bugs present in anything. |
# |
# Direct all feedback to: monmotha@indy.rr.com |
# --MonMotha |
# |
# When e-mailing with problems, please include firewall script version, |
# iptables version, kernel version, and GNU BASH version. If you think |
# your problem might be related to kernel configuration, please attach |
# the .config file for your kernel. |
# --MonMotha |
# |
# ----------------------------------------------------------------------|
# SYSTEM REQUIREMENTS: You must have either compiled the appropriate |
# iptables support into your 2.4 kernel or have loaded all the |
# applicable modules BEFORE you run this script. This script will not |
# load modules for you. |
# |
# You will need (at least) the following kernel options to use |
# this firewall: CONFIG_NETFILTER, CONFIG_IP_NF_IPTABLES, |
# CONFIG_IP_NF_FILTER, CONFIG_IP_NF_MATCH_STATE and |
# CONFIG_IP_NF_TARGET_REJECT. |
# To use the masquerading you will also need (at least): |
# CONFIG_IP_NF_CONNTRACK, CONFIG_IP_NF_NAT, CONFIG_IP_NF_NAT_NEEDED |
# and CONFIG_IP_NF_TARGET_MASQUERADE. |
# Additional options may be needed to use other features. |
# |
# You need iptables. Get it at "http://netfilter.filewatcher.org". |
# Some of the features will need patches only present in the CVS |
# |
# This script was written (and partially tested) with iptables CVS |
# and kernel 2.4.x (non testing) in mind. |
# |
# Also, this is a BASH shell script...any 2.x version of GNU BASH |
# should work. |
# ----------------------------------------------------------------------|
# |
# ALL USERS, READ THE FOLLOWING: |
# |
# This is distributed under the BSD liscense sans advertising clause: |
# |
# Redistribution and use in source and binary forms, with or without |
# modification, are permitted provided that the following conditions |
# are met: |
# |
# 1.Redistributions of source code must retain the above copyright |
# notice, this list of conditions and the following disclaimer. |
# 2.Redistributions in binary form must reproduce the above |
# copyright notice, this list of conditions and the following |
# disclaimer in the documentation and/or other materials provided |
# with the distribution. |
# 3.The name of the author may not be used to endorse or promote |
# products derived from this software without specific prior |
# written permission. |
# |
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED |
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY |
# DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE |
# GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS |
# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER |
# IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR |
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN |
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE |
# |
# While this may be used freely for commercial use, I do REQUEST that |
# any commercial users please tell me via e-mail at |
# monmotha@indy.rr.com that they are using it, why they chose it, |
# how well it works, etc. |
# |
# ----------------------------------------------------------------------|
# IMPORTANT: This firewall is currently in beta! It may be too |
# restrictive or insecure. |
# ----------------------------------------------------------------------|
# CHANGELOG: (Since 2.3.0-pre1a only) |
# version 2.3.8-pre7: Fix syntax error in ALLOW_HOSTWISE_PROTO |
# version 2.3.8-pre7b: More sanity checking |
# LOCIP option for DENY_HOSTWISE options |
# LOCIP option for DENY_ALL |
# version 2.3.8-pre7a: Clarify liscense |
# Alias TCP_ALLOW and UDP_ALLOW to |
# ALLOW_HOSTWISE_xxx as they contain |
# redundant code |
# Move BAD_ICMP to non-experimental options |
# Changed exit status; review your scripts |
# Additional sanity checking |
# Add ALLOW_HOSTWISE_PROTO option |
# version 2.3.8-pre6: Fix comment errors |
# Fix a bug in config checks |
# Add BRAINDEAD_ISP option |
# version 2.3.8-pre5: More fixes for multiple LAN interfaces |
# Fix a syntax error in ALLOW_HOSTWISE_TCP |
# version 2.3.8-pre5d: Intersubnet Routing should work again |
# TOS Mangles default to off |
# version 2.3.8-pre5c: Port forwards apply to all interfaces only |
# when LOCIP is used |
# Multiple LAN Interfaces (breaks DMZ) |
# version 2.3.8-pre5b: Fix missing fi near line 1160 |
# version 2.3.8-pre5a: Fix BAD_ICMP and echo-request |
# Fix port forwards |
# Add checks for limit and REJECT |
# Local IP options for TCP/UDP allows (and |
# hostwise allows) |
# Port forwards now apply to all interfaces |
# Remove redundant disclaimer |
# version 2.3.8-pre4: Fix typo in SUPER_EXEMPT |
# Fix reversal of DMZIN/OUT |
# Fix reversed logic in port forwards |
# version 2.3.8-pre3: Fix DHCP server syntax error |
# Replace ALLOW_ALL with SUPER_EXEMPT |
# Fix ALLOW_OUT_TCP |
# Fix SNAT status reporting |
# Removed some obsoleted code |
# Move DHCP server to stable options |
# Add local IP to port forwards |
# version 2.3.8-pre2: Don't create ULDROP unless used in case |
# system doesn't have ULOG support |
# ALLOW_OUT_TCP now allows a destination port |
# &n
of heeft iptables liever dat ie als module wordt geladen?? dus niet in de kernel.. (heb ik ooit eens iemand horen zeggen, niet op GoT)
.:strip_icc():strip_exif()/u/7091/crop5d9dd6a0545de_cropped.jpeg?f=community)