//flex table opened by JP

Click to See Complete Forum and Search --> : Linux - ipautofw Q


netsurfer
01-04-2000, 07:33 PM
I have a router running ShareTheNet (www.sharethenet.com), but it basically is a linux router/firewall that runs off a bootdisk.

There is a section to add manual startup commands, and here is where you can enter in linux commands... I think.

Anyway, I have this line (from STN's website):

ipautofw -A -r tcp 21001 21012 -h 192.168.0.10

192.168.0.10 is the IP of my machine, (the router is set to be 192.168.0.1), and 21001-21012 are tcp ports allocated for ICQ, and the connection preferences and everything have been set properly...

My biggest gripe is this, I rarely can stay connected for more than say... 10-15 minutes. And I'm pretty sure I know why. All I want to know is, is there any linux command that I can enter into my STN router to increase the timeout delay? the way it's set, the timeout is within... 60 seconds. If I don't touch ICQ (like send a msg, etc) the timeout will disappear, and I'll lose connection to the server... if I click Online again, it'll reestablish my connection, sometimes... other times, it'll get stucking in that "Connecting" loop and never really establish a connection...

---Edit---

UDP xxxxxxxx.xxxx:1391 fes-d016.icq.aol.com:4000 58

that line shows up in my router's socket connections. So I guess I need to know a linux command that I can add to extend the timeout period for that particular UDP packet.

---Edit---

[This message has been edited by netsurfer (edited 01-04-2000).]

Dominus
01-05-2000, 09:07 AM
Not familiar with that product, but if it's Linux based (based on kernel 2.0 if it uses IPAUTOFW), then this should do the trick.

http://www.linuxdoc.org/HOWTO/IP-Masquerade-HOWTO.html

You should probably look into using the newer tools like IPPORFW & IPMASQADM from the 2.2 kernel series though. I found them to me much easier to deal with.

netsurfer
01-05-2000, 04:10 PM
I found a command:

ipfwadm -M -s 7200 10 160

Is there any place I can look to get help on all the syntax (like -M and -s)? From the page I found (http://www.linuxdoc.org/HOWTO/IP-Masquerade-HOWTO-3.html), it also modifies TCP timeouts, timeout for traffic after the TCP/IP "FIN" packet is received, and UDP timeouts.

All i'm interested in adjusting is the UDP timeout... is that possible?

--edit--

Btw, since this bootdisk (which runs linux 2.0.36) is made on a windows machine, I can't exactly delve into upgrading kernels. you can download the program and see how it works... fairly interesting, but it doesn't exactly let you get into linux.. (aside from a little box that lets you add extra commands).. which is good for me, since I've given up doing straight linux to a hard drive, and doing the whole router bit... for now.

coyote linux (http://www.vortech.net/coyote/coyote.htm) is similar to STN, and it uses the newer 2.2.x kernel which supports IPChains, but if I can stick with using STN... then i'd prefer to do so.

[This message has been edited by netsurfer (edited 01-05-2000).]