actiontec gt701wg through Linux box to winxp

[yellowjester]

I am running mandrake 10.1 on the linux box and sharing the internet connection with my Winxp box I can't seem to foward the ports through the linux box. any ideas?

[cpugeniusmv]

How is the network setup?

Cable or DSL modem -> WAN port on router?

And both computers on LAN ports or wireless cards?

If that's the case, you shouldn't have to deal with the Linux machine at all to forward ports to the Windows box.

Be more specific :-D

[yellowjester]

actiontec GT701-WG asdl modem is hardwired to the Linux box.
The Linux Box is running DHCP to dish out IPs to the WinXP box on a hardwired lan.
I can run amule on the Linux box and recieve High Id but when I run emule on the xp box I am firewalled. I have tried adding rediect rules to shorewall for the ports I need to use but this doesn't seem to work.

[cpugeniusmv]

Okay, what I think you're going to need to do is DMZ the Linux box in the configuration of the DSL modem...

After that, any port forwarding you do from the Linux box should work.

[yellowjester]

thanks for the suggestions, but after rereading the shorewall guide if found my solutio0n. I just needed to create some dnat rules for the specific ports. A DMZ would have made the lan less secure than I would have liked.

[cpugeniusmv]

thanks for the suggestions, but after rereading the shorewall guide if found my solutio0n. I just needed to create some dnat rules for the specific ports. A DMZ would have made the lan less secure than I would have liked.
It wouldn't have been any less secure if you're running a firewall on the linux box.

[infringer]

cpugeniusmv is correct on that one...

In all logic firmware on a chip is software so technically no matter what your running a software firewall though the DMZ puts you outside the firmware firewall which I suppose would be a little tougher to get around or exploit but to tell the truth a software firewall would serve the purpose just fine...

In linux everything is open source folks dont put backdoors in opensource software too often as it will be spotted asap...

With windows hell who knows whats being sent or recieved or how many holes or backdoors are in the OS but sygate will monitor all... I heard KERIO is good as well yet to try it myself though...

But in any case the choice is yours. I personally set my IP to static then DMZ'd that IP with a software firewall. I have an actiontec as well.

-infringer-