603 lines
10 KiB
HTML
603 lines
10 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
|
|
<HTML
|
|
><HEAD
|
|
><TITLE
|
|
>Supported Client Software and Other Setup Notes</TITLE
|
|
><META
|
|
NAME="GENERATOR"
|
|
CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
|
|
REL="HOME"
|
|
TITLE="Linux IP Masquerade HOWTO"
|
|
HREF="index.html"><LINK
|
|
REL="UP"
|
|
TITLE="Other IP Masquerade Issues and Software Support "
|
|
HREF="ipmasq-support-portfw-and-stronger-rulesets.html"><LINK
|
|
REL="PREVIOUS"
|
|
TITLE="Incoming services "
|
|
HREF="incoming-services.html"><LINK
|
|
REL="NEXT"
|
|
TITLE="Stronger firewall rulesets to run after initial testing"
|
|
HREF="stronger-firewall-examples.html"></HEAD
|
|
><BODY
|
|
CLASS="SECT1"
|
|
BGCOLOR="#FFFFFF"
|
|
TEXT="#000000"
|
|
LINK="#0000FF"
|
|
VLINK="#840084"
|
|
ALINK="#0000FF"
|
|
><DIV
|
|
CLASS="NAVHEADER"
|
|
><TABLE
|
|
SUMMARY="Header navigation table"
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TH
|
|
COLSPAN="3"
|
|
ALIGN="center"
|
|
>Linux IP Masquerade HOWTO</TH
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="left"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="incoming-services.html"
|
|
ACCESSKEY="P"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="80%"
|
|
ALIGN="center"
|
|
VALIGN="bottom"
|
|
>Chapter 6. Other IP Masquerade Issues and Software Support</TD
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="right"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="stronger-firewall-examples.html"
|
|
ACCESSKEY="N"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
></TABLE
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"></DIV
|
|
><DIV
|
|
CLASS="SECT1"
|
|
><H1
|
|
CLASS="SECT1"
|
|
><A
|
|
NAME="SUPPORTED-CLIENT-SOFTWARE"
|
|
></A
|
|
>6.3. Supported Client Software and Other Setup Notes</H1
|
|
><P
|
|
><SPAN
|
|
CLASS="QUOTE"
|
|
>"<STRONG
|
|
>** The
|
|
<A
|
|
HREF="http://www.tsmservices.com/masq/"
|
|
TARGET="_top"
|
|
>Linux Masquerade Application
|
|
list</A
|
|
> has a lot of good information regarding applications that work
|
|
through Linux IP masquerading. This site was recently taken over by Steve
|
|
Grevemeyer, who implemented it with a full database backend. It's a great
|
|
resource! </STRONG
|
|
>"</SPAN
|
|
></P
|
|
><P
|
|
>Generally, any application that uses standard TCP and UDP should work. If
|
|
you have any suggestion, hints, etc., please see the
|
|
<A
|
|
HREF="http://ipmasq.webhop.net/"
|
|
TARGET="_top"
|
|
>IP Masquerade Resource</A
|
|
> for more
|
|
details.</P
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="GAME-CLIENTS"
|
|
></A
|
|
>6.3.1. Network Clients that -Work- with IP Masquerade</H2
|
|
><P
|
|
>General Clients:</P
|
|
><P
|
|
><P
|
|
></P
|
|
><DIV
|
|
CLASS="VARIABLELIST"
|
|
><DL
|
|
><DT
|
|
>Archie</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, file searching client (not all archie clients are
|
|
supported) </P
|
|
></DD
|
|
><DT
|
|
>FTP</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, with the
|
|
<STRONG
|
|
>ip_masq_ftp.o</STRONG
|
|
> kernel module for active
|
|
FTP connections.</P
|
|
></DD
|
|
><DT
|
|
>Gopher client</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms</P
|
|
></DD
|
|
><DT
|
|
>HTTP</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, WWW surfing </P
|
|
></DD
|
|
><DT
|
|
>IRC</DT
|
|
><DD
|
|
><P
|
|
>all IRC clients on various supported platforms, DCC is supported via the
|
|
<STRONG
|
|
>ip_masq_irc.o</STRONG
|
|
> module</P
|
|
></DD
|
|
><DT
|
|
>NNTP (USENET)</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, USENET news client </P
|
|
></DD
|
|
><DT
|
|
>PING</DT
|
|
><DD
|
|
><P
|
|
>all platforms, with ICMP Masquerading kernel option</P
|
|
></DD
|
|
><DT
|
|
>POP3</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, email clients </P
|
|
></DD
|
|
><DT
|
|
>SSH</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, Secure TELNET/FTP clients </P
|
|
></DD
|
|
><DT
|
|
>SMTP</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, email servers like Sendmail, Qmail, PostFix, etc.</P
|
|
></DD
|
|
><DT
|
|
>TELNET</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, remote session</P
|
|
></DD
|
|
><DT
|
|
>TRACEROUTE</DT
|
|
><DD
|
|
><P
|
|
>UNIX and Windows based platforms, some variations may not work</P
|
|
></DD
|
|
><DT
|
|
>VRML</DT
|
|
><DD
|
|
><P
|
|
>Windows(possibly all supported platforms), virtual reality surfing </P
|
|
></DD
|
|
><DT
|
|
>WAIS client</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms</P
|
|
></DD
|
|
></DL
|
|
></DIV
|
|
></P
|
|
><P
|
|
>Multimedia and Communication Clients:</P
|
|
><P
|
|
> <P
|
|
></P
|
|
><DIV
|
|
CLASS="VARIABLELIST"
|
|
><DL
|
|
><DT
|
|
>All H.323 programs</DT
|
|
><DD
|
|
><P
|
|
>- MS Netmeeting, Intel Internet Phone Beta , and other H.323 applications -
|
|
There are now two solutions to accomplish this through IPMASQed connections:</P
|
|
><P
|
|
>There is a stable BETA 2.2.x kernel module available on the
|
|
<A
|
|
HREF="http://ipmasq.webhop.net"
|
|
TARGET="_top"
|
|
>MASQ WWW site</A
|
|
> or at
|
|
<A
|
|
HREF="http://www.coritel.it/projects/nat/implementation.htm"
|
|
TARGET="_top"
|
|
>http://www.coritel.it/projects/nat/implementation.htm</A
|
|
> to work with
|
|
Microsoft Netmeeting v3.x code on 2.2.x kernels. There is also another module
|
|
version on the MASQ WWW site specifically for Netmeeting 2.x with 2.0.x
|
|
kernels, but this does not support Netmeeting v3.x. </P
|
|
><P
|
|
>Another commercial solution is the
|
|
<A
|
|
HREF="http://www.equival.com.au/phonepatch/index.html"
|
|
TARGET="_top"
|
|
>Equivalence's
|
|
PhonePatch</A
|
|
> H.323 gateway.</P
|
|
></DD
|
|
></DL
|
|
></DIV
|
|
></P
|
|
><P
|
|
><P
|
|
></P
|
|
><DIV
|
|
CLASS="VARIABLELIST"
|
|
><DL
|
|
><DT
|
|
>Alpha Worlds</DT
|
|
><DD
|
|
><P
|
|
>Windows, Client-Server 3D chat program </P
|
|
></DD
|
|
><DT
|
|
>CU-SeeMe</DT
|
|
><DD
|
|
><P
|
|
>all supported platforms, with the <STRONG
|
|
>ip_masq_cuseeme</STRONG
|
|
> module loaded, please see <A
|
|
HREF="cuseeme.html"
|
|
>Section 6.8</A
|
|
> for more
|
|
details.</P
|
|
></DD
|
|
><DT
|
|
>ICQ</DT
|
|
><DD
|
|
><P
|
|
>all supported clients. Requires the Linux kernel to be either compiled with
|
|
PORTFW support, have the ip_masq_icq module (2.2.x and 2.0.x only), or have
|
|
a SOCKS proxy running. A full description of this configuration is in
|
|
<A
|
|
HREF="icq.html"
|
|
>Section 6.9</A
|
|
>.</P
|
|
></DD
|
|
><DT
|
|
>Internet Phone 3.2</DT
|
|
><DD
|
|
><P
|
|
>Windows, Peer-to-peer audio communications, users can reach you only if you
|
|
initiate the call, but those users cannot call you without a specific port
|
|
forwarding setup. See <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more details. </P
|
|
></DD
|
|
><DT
|
|
>Internet Wave Player</DT
|
|
><DD
|
|
><P
|
|
>Windows, network streaming audio </P
|
|
></DD
|
|
><DT
|
|
>Powwow</DT
|
|
><DD
|
|
><P
|
|
>Windows, Peer-to-peer Text audio whiteboard communications, users can reach
|
|
you only if you initiate the call, but those users cannot call you without
|
|
a specific port forwarding setup. See <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more
|
|
details. </P
|
|
></DD
|
|
><DT
|
|
>Real Audio Player</DT
|
|
><DD
|
|
><P
|
|
>Windows, network streaming audio, higher quality available with the
|
|
<STRONG
|
|
>ip_masq_raudio</STRONG
|
|
> UDP module </P
|
|
></DD
|
|
><DT
|
|
>True Speech Player 1.1b</DT
|
|
><DD
|
|
><P
|
|
>Windows, network streaming audio </P
|
|
></DD
|
|
><DT
|
|
>VDOLive</DT
|
|
><DD
|
|
><P
|
|
>Windows, with the <STRONG
|
|
>ip_masq_vdolive</STRONG
|
|
> patch</P
|
|
></DD
|
|
><DT
|
|
>Worlds Chat 0.9a</DT
|
|
><DD
|
|
><P
|
|
>Windows, Client-Server 3D chat program </P
|
|
></DD
|
|
></DL
|
|
></DIV
|
|
></P
|
|
><P
|
|
>Games - See <A
|
|
HREF="looseudp.html"
|
|
>Section 6.10</A
|
|
>for more details on the LooseUDP patch</P
|
|
><P
|
|
><P
|
|
></P
|
|
><DIV
|
|
CLASS="VARIABLELIST"
|
|
><DL
|
|
><DT
|
|
>Battle.net</DT
|
|
><DD
|
|
><P
|
|
>Works but requires TCP ports 116, 118 and UDP port 6112 IPPORTFWed to the
|
|
client game machine. See <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more details. Please
|
|
note that FSGS and Bnetd servers still require IPPORTFW because they have not
|
|
been re-written to be NAT-friendly.</P
|
|
></DD
|
|
><DT
|
|
>BattleZone 1.4</DT
|
|
><DD
|
|
><P
|
|
>Works with LooseUDP patch and new NAT-friendly -- email <A
|
|
HREF="mailto:dranch@trinnet.net"
|
|
TARGET="_top"
|
|
>David Ranch</A
|
|
> for the .DLLs from
|
|
Activision</P
|
|
></DD
|
|
><DT
|
|
>Dark Reign 1.4</DT
|
|
><DD
|
|
><P
|
|
>Works with LooseUDP patch or requires TCP ports 116 and 118 and UDP port 6112
|
|
IPPORTFWed to the game machine. See <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more
|
|
details.</P
|
|
></DD
|
|
><DT
|
|
>Diablo</DT
|
|
><DD
|
|
><P
|
|
>Works with LooseUDP patch or requires TCP ports 116 and 118 and UDP port 6112
|
|
IPPORTFWed to the game machine. Newer versions of Diablo use only TCP port
|
|
6112 and UDP port 6112. See <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more details.</P
|
|
></DD
|
|
><DT
|
|
>Heavy Gear 2</DT
|
|
><DD
|
|
><P
|
|
>Works with LooseUDP patch or requires TCP ports 116 and 118 and UDP port
|
|
6112 IPPORTFWed to the game machine. See <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more
|
|
details.</P
|
|
></DD
|
|
><DT
|
|
>Quake I/II/III</DT
|
|
><DD
|
|
><P
|
|
>Works right out of the box but requires the
|
|
<STRONG
|
|
>ip_masq_quake</STRONG
|
|
> module if there are more than
|
|
one Quake I/II/III player behind a MASQ box. Also, this module only supports
|
|
Quake I and QuakeWorld by default. If you need to support Quake II or
|
|
non-default server ports, please see the module install section of
|
|
<A
|
|
HREF="firewall-examples.html#RC.FIREWALL-IPFWADM"
|
|
>Section 3.4.3</A
|
|
> and <A
|
|
HREF="firewall-examples.html#RC.FIREWALL-IPCHAINS"
|
|
>Section 3.4.2</A
|
|
>
|
|
rulesets.</P
|
|
></DD
|
|
><DT
|
|
>StarCraft</DT
|
|
><DD
|
|
><P
|
|
>Works with the LooseUDP patch, IPPORTFWing TCP, and UDP ports 6112 to the
|
|
internal MASQed game machine. See <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more
|
|
details.</P
|
|
></DD
|
|
><DT
|
|
>WorldCraft</DT
|
|
><DD
|
|
><P
|
|
>Works with LooseUDP patch</P
|
|
></DD
|
|
></DL
|
|
></DIV
|
|
></P
|
|
><P
|
|
>Other Clients:</P
|
|
><P
|
|
><P
|
|
></P
|
|
><DIV
|
|
CLASS="VARIABLELIST"
|
|
><DL
|
|
><DT
|
|
>Linux net-acct package</DT
|
|
><DD
|
|
><P
|
|
>Linux, network administration-account package</P
|
|
></DD
|
|
><DT
|
|
>NCSA Telnet 2.3.08</DT
|
|
><DD
|
|
><P
|
|
>DOS, a suite containing telnet, ftp, ping, etc.</P
|
|
></DD
|
|
><DT
|
|
>PC-anywhere for Windows</DT
|
|
><DD
|
|
><P
|
|
>MS-Windows remotely controls a PC over TCP/IP, but only works if it is a
|
|
client, but not a host without a specific port forwarding setup. See
|
|
<A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
>for more details.</P
|
|
></DD
|
|
><DT
|
|
>Socket Watch</DT
|
|
><DD
|
|
><P
|
|
>uses NTP - network time protocol</P
|
|
></DD
|
|
></DL
|
|
></DIV
|
|
></P
|
|
></DIV
|
|
><DIV
|
|
CLASS="SECT2"
|
|
><H2
|
|
CLASS="SECT2"
|
|
><A
|
|
NAME="AEN1897"
|
|
></A
|
|
>6.3.2. Clients that do not have full support in IP MASQ:</H2
|
|
><P
|
|
>
|
|
<P
|
|
></P
|
|
><DIV
|
|
CLASS="VARIABLELIST"
|
|
><DL
|
|
><DT
|
|
>Intel Streaming Media Viewer Beta 1</DT
|
|
><DD
|
|
><P
|
|
>Cannot connect to server</P
|
|
></DD
|
|
><DT
|
|
>Netscape CoolTalk</DT
|
|
><DD
|
|
><P
|
|
>Cannot connect to opposite side</P
|
|
></DD
|
|
><DT
|
|
>WebPhone</DT
|
|
><DD
|
|
><P
|
|
>Cannot work at present (it makes invalid assumptions about addresses).</P
|
|
></DD
|
|
></DL
|
|
></DIV
|
|
></P
|
|
></DIV
|
|
></DIV
|
|
><DIV
|
|
CLASS="NAVFOOTER"
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"><TABLE
|
|
SUMMARY="Footer navigation table"
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="incoming-services.html"
|
|
ACCESSKEY="P"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="index.html"
|
|
ACCESSKEY="H"
|
|
>Home</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="stronger-firewall-examples.html"
|
|
ACCESSKEY="N"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
>Incoming services</TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="ipmasq-support-portfw-and-stronger-rulesets.html"
|
|
ACCESSKEY="U"
|
|
>Up</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
>Stronger firewall rulesets to run after initial testing</TD
|
|
></TR
|
|
></TABLE
|
|
></DIV
|
|
></BODY
|
|
></HTML
|
|
> |