Author Topic: YAHOO CHAT ROOM through yahoo messenger using squid proxy (Read 45743 times)

Ricky · « **Reply #15 on:** October 06, 2006, 08:52:25 AM »

If you are doing Maquerading ie. NAT then you should not face voice problem. I suggets you to turn of redirection so that we can check few thigns and see if it works, if still it won't then you must have some firewall rules set in system then you will have to review them.

ffidx · « **Reply #16 on:** October 06, 2006, 09:07:26 AM »

As I've sent you all my configuration. Plz point out my mistake. or plz send me some appropriate configuration.

Thanks,
Regards,
Farrukh

ffidx · « **Reply #17 on:** October 06, 2006, 09:12:44 AM »

should I use SNAT like

iptables -t nat -A POSTROUTING -i eth1 -p tcp -m multiport --dport 5050,11999,5000,5001,5100 -j SNAT --to-source xxx.xxx.xxx.xxx

Then here what source ip should I use, in my case eth0 is my internet NIC and eth1 is my LAN

eth0 = 192.168.0.6/24
eth1 = 192.168.11.0/24

--to-source xxx.xxx.xxx can i use 192.168.0.6 beacause in MASQUERADING it used by default

Sir plz help me

Ricky · « **Reply #18 on:** October 06, 2006, 04:40:55 PM »

give me line of masquerade also as well as make sure that you are using right DNS server in your clients.. if you have enabled caching nameserver then use ur server's IP as use ur ISP's IP as DNS server.

ffidx · « **Reply #19 on:** October 07, 2006, 03:12:10 AM »

iptables -t nat -A POSTROUTING -s 192.168.11.0/24 -d ! 192.168.11.0/24 -o eth0 -j MASQUERADE

This line I am using for masquerading, my eth1 lan interface ip=192.168.11.2 eth0 internet interface ip=192.168.0.6

On the client side the DNS i am using is 192.168.11.2 although I've not configure any dns on my network server.
and in proxy setting i am using 192.168.0.6:8080 as my porxy

Previous setting and this configuration is all about. It is working well for msn and all other browsing accept Yahoo login with no proxy. Can I use following line after Masquerade.

iptables -t nat -A POSTROUTING -i eth1 -p tcp -m multiport --dport 5050,11999,5000,5001,5100 -j SNAT --to-source 192.168.0.6.

Thanks for your help and still waiting for your response.

Ricky · « **Reply #20 on:** October 08, 2006, 05:20:25 AM »

Ok .. try it simple

Code: [Select]

iptables --table nat --append POSTROUTING --out-interface eth0 -j MASQUERADE
   iptables --append FORWARD --in-interface eth1 -j ACCEPT

And remove that your masquerade line.

Also is this 192.168.11.2 is the DNS of your ISP ?

Also you dont' need to do NAT for each port as its already being forwarded in above masquerade, everything, every packet.

ffidx · « **Reply #21 on:** October 08, 2006, 12:36:20 PM »

Thanks sir once again but it is not working if i remove your specified or my masquerade line then msn and yahoo both not work and if i use your or my line then msn connected but yahoo problem is still presists...

no sir 192.168.11.2 is not DNS of my ISP it is the address of eth1 NIC of my server (proxy+firewall) which i am using as gateway and DNS for my client and proxy address i am using eth0 internet NIC (192.168.0.6) sir This server not directly connected to isp it is connected with ISA

sir any mistake

plz guide me

Ricky · « **Reply #22 on:** October 08, 2006, 06:34:05 PM »

those line I gave are two differnet lines, I hope you executed it right, else I don't see any problem.
Also if you are able to open websites properly with that as DNS then no problem in that.

Ricky · « **Reply #23 on:** October 08, 2006, 06:35:53 PM »

I also suggest that temporary you clear all your current settings and then follow this http://www.linuxsolved.com/forums/ftopic115.html

And then tell us if its works, if not then might problem at higher level of firewall ie the server to which your gateway is connected.

ffidx · « **Reply #24 on:** October 09, 2006, 03:01:58 PM »

Yes sir still problem presists, I disable my Squid and just share internet connection but problem is still there it never sign in with no proxy. Sir I am using your specified configuration .
Is it due to to ISA because I am behind ISA(linux box behind ISA) and client is connected through cross cable. Is ISA responsible for all happening??

Any idea!!!
Thank for your guidance

Ricky · « **Reply #25 on:** October 10, 2006, 08:03:15 AM »

To check ISA, connect a client directly to ISA and run Messenger and other things on it, if its fine then our configuration is faulty as its from ISA itself.

Btw, what I suggested you earlier about making test ie only NAT then it should work else problem of ISA

ffidx · « **Reply #26 on:** October 10, 2006, 04:35:08 PM »

Yes My Microsoft client connected successfully behind ISA, The configuration you given to me I've used it as NAT and trun off squid. but problem is still I am facing,

Configuration might be okay as you've tested it, but once again in my senario on my clent i am using 192.168.10.27 and define gateway as 192.168.10.2 which is address of eth1 of my Linux box, on eth1 the gateway i am using is the address of my eth0 which is 192.168.0.6. And in the end on eth0 the gateway i am using is the address of my ISA inner interface which is 192.168.0.1.
I am not configure any DNS for my network.

Is my configuration is ok? then what is the problem, how I get rid off this pain.

Thanks for taking care of me.
Regards,
Farrukh Fida.

ffidx · « **Reply #27 on:** October 10, 2006, 04:38:21 PM »

Is it possible that ISA block my traffic by using MAC-address beacause we have NATed IP address not mac, but question once again then it should block all traffic.

-----------------:(

Ricky · « **Reply #28 on:** October 12, 2006, 09:46:21 AM »

They can block particular traffic by MAC too but I think this is not the case.
I think I must explain few things here.

On the Linux box ie. which you are using as server to your LAN.
If its running NAT script i provided or any other NAT script then.

eth0 = internet
Should have gatway as given by your ISP,
DNS as given by your ISP
Should have IP & subnet mask as given by your ISP.

eth1 = Your LAN.
Should have IP & subnet mask you set for your LAN ie part of LAN.
No other configuration is required on this interface.

Now..
Your client :
Be it any OS wheter Linux or Windows or MAC OS.
Should have IP & subnet as part of lan
Gateway = IP of eth1 of Linux machine.
DNS = either your ISP's or your Linux box if in that DNS forwarding is enabled.In Redhat and fedora its mostly by default. You only have to make a separate entry in resolv.conf.

Code: [Select]

nameserver 127.0.0.1

Now you may compare your setup with above and if its identical to it then should work and later you can configure or enable squid too.

ffidx · « **Reply #29 on:** October 14, 2006, 09:16:22 AM »

Yes i got my mistake,
My linux box not directly connected to the internet by using public or ISP assigned IP address on eth0.

So problem is this not in configuration or in a script.

My linux box is client for ISA which is directly connected to ISP by using public IP and ISP assigned DNS. so when I tried to attached a client with my linux server then it shows problem ( connecting yahoo problem ).

so I got it

Thank you! once again Dear RICKY...