Re: Long-running connections sometimes 'lock up' (ie. AIM/ICQ/Yahoo Messenger) on a FreeBSD 5.1R firewall/NAT...
From: Jed Clear (clear_at_alum.mit.edu)
Date: 09/22/03
- Next message: David: "Re: Personal Firewall Recommendation"
- Previous message: Johnie: "ADSL + Firewall + hub requirement"
- In reply to: Douglas Carmichael: "Long-running connections sometimes 'lock up' (ie. AIM/ICQ/Yahoo Messenger) on a FreeBSD 5.1R firewall/NAT..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 21 Sep 2003 22:10:44 GMT
Douglas Carmichael wrote:
>
> System: FreeBSD 5.1-RELEASE running as a firewall (ipfw) and NAT for
> 192.168.1.0/24
> Interfaces: xl0 (internal interface, 192.168.1.1)
> sis0 (cable modem interface) (address assigned by DHCP)
>
> HTTP connections across the firewall work fine (ie. web browsing) and
> I can
> maintain a connection to a streaming radio station just fine from my
> PowerBook inside the firewall, but AIM, ICQ, and Yahoo Messenger seem
> to [snip]
Do you have frequent traffic on the ones timing out? If not, look for
timeouts in the dynamic firewall rules and with natd, as the other
poster suggested.
>
> Also, conventional FTP doesn't work from my PowerBook inside
> the firewall, even with '-use_sockets' enabled in natd.
> Any ideas? Thanks.
I'm assuming you can login to the FTP server, but ls, put, get (data
transfers) don't work. If so, the problem is that by default FTP try to
open a new TCP connection from the server to the client for data.
Look at the natd(8) option of -punch_fw as one solution.
Or try to use passive (PASV) mode FTP. PASV will usually work if there
is just your firewall causing problems. It won't work if you're trying
to get to a FTP server behind a restrictive firewall.
-Jed
- Next message: David: "Re: Personal Firewall Recommendation"
- Previous message: Johnie: "ADSL + Firewall + hub requirement"
- In reply to: Douglas Carmichael: "Long-running connections sometimes 'lock up' (ie. AIM/ICQ/Yahoo Messenger) on a FreeBSD 5.1R firewall/NAT..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
