[Leaf-user] Re: echoWall 1.32 [was: IPchains / Forwarding question]

[Kory K. <kk...@wo...>]

Scott,
Thanks for jumping in on this. I went back and started over with a fresh
install of the new version. I thought the safest way for me was to have
two lrpboot disks. One pure Dachstein and one for echowall. When I was
working with it yesterday, I had not done the ./echowall install to make
it the default firewall. I now have a new boot disk using echowall as
the firewall.I get no errors and it shows the services enabled that I
configured. I still am unable to connect to a quake II server on an
internal machine through the firewall. I can connect using the internal
IP but not the external.
Do I need to disable anything on the default Dachstein setup? Dachstein
has the weblet which reports info on the rules but I don't understand
much of what I read. Is there something there that will tell you
something?

Thanks again,

Kory Krofft



"Scott C. Best" wrote:

>         Okay, some progress. Version 1.32 of the echowall
> package is now available in the usual places:
>
> ftp://ftp.echogent.com/EchoWall/echowall.lrp
> http://leaf.sourceforge.net/devel/sbest/echowall/
>
>         Changes from 1.31:
>
> 1. Modified rule-flushing and "!lo" nomenclature so that
>    it works with the ipchains (1.3.10?) which ships on
>    Dachstein PR2. Still works with 1.3.9 which is what's
>    on Eigerstein 2Beta.
>
> 2. Added support for Gnutella, to solve for the "double
>    firewall" problem common with the protocol. My wife,
>    aka that woman in front of LimeWire very often, insisted
>    on this one. :)
>
>         Hope it proves useful! Feedback welcome.
>
> cheers,
> Scott
>
> On Sun, 4 Nov 2001, Scott C. Best wrote:
>
> > Kory:
> >       Well, how 'bout that. These lines are causing the
> > trouble in Dachstein:
> >
> > > $IPCHAINS -A input -i !lo -s 127.0.0.0/8 -j DENY
> > > $IPCHAINS -A input -i !lo -d 127.0.0.0/8 -j DENY
> >
> >       Turns out it needs a space between the "!" and the
> > "lo". ES2B (what Dachstein is replacing) didn't. Kooky.
> >
> >       Am rebuilding the echowall package, will post it
> > ASAP and notify.
> >
> > cheers,
> > Scott
> >
> >