Shorewall users - Apr 2006 - DCC transfers don't work, but IRC works

Hi!

Already searched for it and asked in IRC channel but all replies talk
about ip_conntrack_irc and ip_nat_irc.

I have a rule in 'NEW' section of 'shorewall/rules' to irc:
    ACCEPT          fw        net          tcp     6667        #IRC

and 'lsmod|grep irc' shows:
    ip_nat_irc              3648  0
    ip_nat                 22572  8 [...]
    ip_conntrack_irc        8464  1 ip_nat_irc
    ip_conntrack           58908  13 [...]

modules are loaded correct i think, but irc dcc transfers don't work.
I use irssi and when i try to accept a dcc transfer i get:
    DCC can't connect to 83.246.119.63 port 27020
and my shorewall log show:
    Shorewall:all2all:REJECT:IN= OUT=ppp0 [...] PROTO=TCP SPT=54677
DPT=27020 [...]

Someone have any idea of what this can be? How can i know if the
ip_conntrack_irc is working? And what confs in my shorewall can be
wrong?

Thanks.
Kazuo Teramoto

--
«Dans la vie, rien n'est à craindre, tout est à comprendre»
Marie Sklodowska Curie.
NHS^隊X'u<ڂ.y"*mx%jx.j^קvƩXjبȧmݚv&קv^+jZ{az^h஋n){hا׫+h(mZjYwǥrg

On Wednesday 12 April 2006 07:10, -::[Kazuo]::- wrote:
>
> Someone have any idea of what this can be? How can i know if the
> ip_conntrack_irc is working? And what confs in my shorewall can be
> wrong?
>
We just solved this problem via IRC -- Kazuo is running a one-interface 
configuration and had a firewall->net policy of REJECT.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Now solved!
The problem is  with 'policy' i have a 'all all REJECT' and dont
have
a 'fw net ACCEPT'

Thanks!

On 4/12/06, -::[Kazuo]::- <kaz.rag@gmail.com>
wrote:
> Hi!
>
> Already searched for it and asked in IRC channel but all replies talk
> about ip_conntrack_irc and ip_nat_irc.
>
> I have a rule in 'NEW' section of 'shorewall/rules' to irc:
>     ACCEPT          fw        net          tcp     6667        #IRC
>
> and 'lsmod|grep irc' shows:
>     ip_nat_irc              3648  0
>     ip_nat                 22572  8 [...]
>     ip_conntrack_irc        8464  1 ip_nat_irc
>     ip_conntrack           58908  13 [...]
>
> modules are loaded correct i think, but irc dcc transfers don't work.
> I use irssi and when i try to accept a dcc transfer i get:
>     DCC can't connect to 83.246.119.63 port 27020
> and my shorewall log show:
>     Shorewall:all2all:REJECT:IN= OUT=ppp0 [...] PROTO=TCP SPT=54677
> DPT=27020 [...]
>
> Someone have any idea of what this can be? How can i know if the
> ip_conntrack_irc is working? And what confs in my shorewall can be
> wrong?
>
> Thanks.
> Kazuo Teramoto
>
> --
> «Dans la vie, rien n'est à craindre, tout est à comprendre»
> Marie Sklodowska Curie.
>

--
«Dans la vie, rien n'est à craindre, tout est à comprendre»
Marie Sklodowska Curie.
http://www.kazuo.tk
NHS^隊X'u<ڂ.y"*mx%jx.j^קvƩXjبȧmݚv&קv^+jZ{az^h஋n){hا׫+h(mZjYwǥrg