topic Re: how to open ports in Operating System - Linux

how to open ports

ADNAN AHMED — Tue, 21 Jan 2003 06:30:34 GMT

hi
thanx for ur quick response

plz guide me how to open ports in squid, i want to open port 5050. my another problem, client's mirc isn't working.

Re: how to open ports

U.SivaKumar_2 — Tue, 21 Jan 2003 07:07:19 GMT

Hi,

Sorry , Not possible.

Mirc will not run behind Squid. Because squid is not a SOCKS proxy it is a HTTP proxy (FTP too ).

It does not understand IRC protocol which Mirc clients use.

regards,

U.SivaKumar

Re: how to open ports

Admin32 — Tue, 21 Jan 2003 08:51:29 GMT

Keep in mind that your probably going to need the Ident port(113) open aswell if your trying to use Mirc behind a firewall.

Most IRC servers will not allow you to connect to them if you havent got an Ident deamon running.

Re: how to open ports

Stuart Browne — Tue, 21 Jan 2003 21:56:35 GMT

Actually, mIRC can use a 'Proxy Server', thus if you tell squid to allow port 6667 traffic (bad idea though), and tell mIRC to use that..

anyway. I don't advise this course of action.

Re: how to open ports

U.SivaKumar_2 — Wed, 22 Jan 2003 03:46:12 GMT

Dear Stuart Browne ,

I strongly disgree with you , squid cannot deal with IRC protocol .

I agree that the latest Mirc clients work with windows based HTTP proxies.

But as far as Squis is concerned prsesently it is simply NOT POSSIBLE.

regards,

U.SivaKumar

Re: how to open ports

Stuart Browne — Wed, 22 Jan 2003 04:14:53 GMT

*has a quick re-read of squid configuration*

I just vaguely recall reading somewhere of squid's ability just to ferry packets, rather than do any sort of intelligent proxying.

What about:

acl CONNECT method CONNECT
http_access deny CONNECT !SSL_ports

Given that SSL isn't proxied, this is a packet ferry.

What's to stop an idiot admin from doing:

acl IRC_Ports 6667-7000
http_access allow CONNECT IRC_Ports

And issuing the keyword "CONENCT : HTTP/1.1
Host: " in a session?

Squid does support ftp://ftp.isi.edu/in-notes/rfc2817.txt (Tunneling other protocols through the Proxies).

Re: how to open ports

U.SivaKumar_2 — Wed, 22 Jan 2003 05:01:38 GMT

Stuart ,

That's a good idea. I have heard about it but not tried at my site due to security implications.

I hope i was not rude in disagreeing with you.

Thanks,

U.SivaKumar

Re: how to open ports

Stuart Browne — Wed, 22 Jan 2003 05:08:59 GMT

Nah, is ok. I'm used to people disagreeing with me :)

I apologise to all for the "idiot admin" comment too ;)

Re: how to open ports

ADNAN AHMED — Wed, 22 Jan 2003 05:16:03 GMT

Thanxz
Stuart Browne
U.Sivakumar
& if u know any more About THis problem then reply me thanxz Again....

Re: how to open ports

Stuart Browne — Wed, 22 Jan 2003 05:56:59 GMT

So not only do you fail to see that the question has already be answered, but you also fail to assign points to the posters. *sigh*

The post I wrote with 'CONNECT' in it is what you are are after. If it is not clear enough in there, then I suggest you read Squid's documentation (http://www.squid-cache.org/) and get it direct from the source.

The FAQ has the details.

Re: how to open ports

Steven E. Protter — Wed, 22 Jan 2003 14:23:06 GMT

Read this post.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xf05b5c7609e9d61190050090279cd0f9,00.html

The book mentioned in my second post does have a cookbook for openning up mirc.

You will need to switch the firewall to iptables and modify the examples.

My attached iptables configuration contains my NSP/server's IP addresses, if you don't change them, you could disable your Internet access.

P