UDP/TCP port redirect options under RH 7.2??

UDP/TCP port redirect options under RH 7.2??

Post by Bosc » Thu, 10 Jan 2002 13:17:10



Greetings,
I'm setting up a new server running RH 7.2. I can already port forward using
"rinetd", but it only redirects TCP connections. I need to redirect a UDP
port for PCANYWHERE.
On my RH 6.2 server I use "ipmasqadm" in my ipchains firewall script and it
works fine..
Will iptables do the trick? or is there something else out there?  Better
yet, will ipmasqadm work under 7.2 if I choose to run IPCHAINS instead of
IPTABLES???

Any help would be appreciated...
Thanks
Mark LeBlanc

 
 
 

UDP/TCP port redirect options under RH 7.2??

Post by Dean Thompso » Thu, 10 Jan 2002 22:29:59


Hi!,

Quote:> Greetings,
> I'm setting up a new server running RH 7.2. I can already port forward
> using "rinetd", but it only redirects TCP connections. I need to redirect a
> UDP port for PCANYWHERE. On my RH 6.2 server I use "ipmasqadm" in my
> ipchains firewall script and it works fine..
> Will iptables do the trick? or is there something else out there?  Better
> yet, will ipmasqadm work under 7.2 if I choose to run IPCHAINS instead of
> IPTABLES???

Take a look at the iptables DNAT command for all your needs.  There is no need
to use the ipmasqadm program under 7.2 when using iptables.  I would basically
just bite the bullet and migrate all your rules over to iptables.

See ya

Dean Thompson

--
+____________________________+____________________________________________+

| Bach. Computing (Hons)     | ICQ     - 45191180                         |
| PhD Student                | Office  - <Off-Campus>                     |
| School Comp.Sci & Soft.Eng | Phone   - +61 3 9903 2787 (Gen. Office)    |
| MONASH (Caulfield Campus)  | Fax     - +61 3 9903 1077                  |
| Melbourne, Australia       |                                            |
+----------------------------+--------------------------------------------+

 
 
 

1. ipchains/TCP/UDP, Why should I open UDP ports so that my TCP ports can work?

Hi,

I have set up firewall to accept some ports.
/sbin/ipchains -F input
/sbin/ipchains -P input ACCEPT
/sbin/ipchains -A input -p TCP -s 0/0 --dport ssh -j ACCEPT
/sbin/ipchains -A input -p UDP -s 0/0 --dport ssh -j ACCEPT
....

Then I want to lock down all other ports.
/sbin/ipchains -A input -p TCP -s ! 192.168.0.0/24 -j DENY

#??? what's wrong with this UDP ???
/sbin/ipchains -A input -p UDP -s ! 192.168.0.0/24 -j DENY

If I comment out the UDP line, I can ssh into firewall from outside.
If I don't comment out that line, I can no longer ssh into firewall from
outside.

Why should I open UDP ports so that my TCP ports can work?

Thanks for any help.

Ed Wu

2. sed problem - How to avoid infinite loop when recursing ?

3. How do I pass extra ghostscript options in RH 7.2?

4. Webmail Setup Question.

5. NFS and "High" security option in RH 7.2

6. Re-enabling the mirrored slices

7. Does HWADDR= option in ifcfg-eth0 work on RH 7.2 ?

8. gcc for the IBM RT

9. outgoing TCP timeouts, RH 7.2 Alpha

10. UDP/TCP ports -> protocol port

11. Hacked? TCP port 12345 and UDP port 2364

12. RH 7.2 problem: isatty() confused about serial port.

13. Ignore all incoming udp/ip and udp/ip on all ports, except open ports?