Question about getting MSN messenger to work with a linux gateway...

[aMiSHBoB]

I am using Linux as a gateway to the internet for the 3 computers in my local network. The local addresses I use are on 192.168.0.0 range. My server being 192.168.0.1 and I have 2 nics in my server one hooked to my cable modem and the other hooked to my network switch.

This is what I use to allow the internet to pass through to my internal computers.

ipchains -A forward -i eth0 -p ALL -j MASQ

What would I need to use to allow MSN to use voice chat and video through my linux machine. I am not totaly clear on what command line to use with ipchains to allow the access to the ports that Microsoft says will be needed by MSN messenger. I am a little clueless about this after trying and not getting it to work

Here is just an example of what I was trying to use for ipchains


ipchains -A input -b -p TCP --source 65.33.3.22 1024:65535 --destination 192.168.0.2 1024:65535

I used such a vast range of ports just to see if I could get it working. When I did I was going to just allow the ports needed...

Any suggestions on this.

Thanks for your help...

 

[ifincham]

Hi,



In theory, you'd allow tcp port 6901, however it looks like it doesn't work with nat (network address translation) and masquerading is a form of source nat. See -->

http://support.microsoft.com/support/kb/articles/q278/8/87.asp

.



Regards

 

[arlequin]

Hello aMiSHBoB!

I've the same situation, but I am not using ipchains.
Why don't you try the following:
Install HTTPort (

http://www.htthost.com/)on

the three PCs connected to your gateway. It's a vey usefull application, specially when going out thru a HTTP Proxy sever like squid. (Yes, I know, ,you didn't mentioned squid, but I suppose you do have it installed... well, if tou don't I suggest you to set up the squid proxy-cache)

Arlequín
arlequin@montevideo.com.uy

http://www.arlequinadas.com

 

[arlequin]

Hello aMiSHBoB!

I've the same situation, but I am not using ipchains.
Why don't you try the following:
Install HTTPort (

http://www.htthost.com/)on

the three PCs connected to your gateway. It's a vey usefull application, specially when going out thru a HTTP Proxy sever like Squid(

http://www.squid-cache.org/).

Yes, I know, ,you didn't mentioned squid, but I suppose you do have it installed... well, if tou don't I suggest you to set up the squid proxy-cache ;-)

HTTP Port will convert every MSN request y an HTTP request and will send it to the proxy server. You don't need to have a SOCKS server on your GNU/Linux gatewawy.

Hope this helps Arlequín
arlequin@montevideo.com.uy

http://www.arlequinadas.com