Very Computer

    Hello,

               I want to setup ICQ to be allowed through my ipchains
firewall via internal machine being 192.168.0.

by firewall looks like this

##=> NTP-fwin
##-> Allows the firewall host to open connections to NTP time servers on the
##-> inside network.
/sbin/ipchains -A output -i eth0 -s 192.168.0.1 1024:65535 -d
192.168.0.0/255.255.255.0 123 -p tcp -j ACCEPT
/sbin/ipchains -A input -i eth0 -s 192.168.0.0/255.255.255.0 123 -d
192.168.0.1 1024:65535 ! -y -p tcp -j ACCEPT

##=> NTP-fwout
##-> Allows the firewall host to open connections to NTP time servers on the
##-> outside network.
/sbin/ipchains -A output -i ppp0 -s 203.22.141.148 1024:65535 -d !
192.168.0.1 123 -p tcp -j -l ACCEPT
/sbin/ipchains -A input -i ppp0 -s ! 192.168.0.1 123 -d 203.22.141.148
1024:65535 ! -y -p tcp -j -l ACCEPT

Also while i'm at it ,these above rules do not allow me to get time from a
specific time server. I get in my syslog file "operation not permitted. I
basically have a cron job that  allows for my machine to update time via a
time server every 4 hrs. Ever since i changed my firewall i can't connect to
it

Thanks in advance

Andrew

you can download the kernel module for ip_masq_icq from the ipmasq site -
although, it is only for older versions of icq that use the default port of
4000 to connect.  i dont have the module loaded and icq masq is working
fine.  i use david a. ranch's trinityos firewall on my masq box -  with some
added configurations and firewall ruleset lines.  hope this helps :-)

dave

    Hello,

               I want to setup ICQ to be allowed through my ipchains
firewall via internal machine being 192.168.0.

by firewall looks like this

##=> NTP-fwin
##-> Allows the firewall host to open connections to NTP time servers on the
##-> inside network.
/sbin/ipchains -A output -i eth0 -s 192.168.0.1 1024:65535 -d
192.168.0.0/255.255.255.0 123 -p tcp -j ACCEPT
/sbin/ipchains -A input -i eth0 -s 192.168.0.0/255.255.255.0 123 -d
192.168.0.1 1024:65535 ! -y -p tcp -j ACCEPT

##=> NTP-fwout
##-> Allows the firewall host to open connections to NTP time servers on the
##-> outside network.
/sbin/ipchains -A output -i ppp0 -s 203.22.141.148 1024:65535 -d !
192.168.0.1 123 -p tcp -j -l ACCEPT
/sbin/ipchains -A input -i ppp0 -s ! 192.168.0.1 123 -d 203.22.141.148
1024:65535 ! -y -p tcp -j -l ACCEPT

Also while i'm at it ,these above rules do not allow me to get time from a
specific time server. I get in my syslog file "operation not permitted. I
basically have a cron job that  allows for my machine to update time via a
time server every 4 hrs. Ever since i changed my firewall i can't connect to
it

Thanks in advance

Andrew