Re: port routing

["Fawaz" <sshbsd@hotmail.com>]

Hello,

Sorry for the confusion I made..
The reason why I am asking, is that I have an ADSL line connection at home,
and a CISCO 677 router (192.168.0.50/ 255.255.255.0) owned by my ISP, I have
a local area network of 2 machines, one is windows 2000 (192.168.0.1/
255.255.255.0), and the otherone is a BSD box (192.168.0.2/ 255.255.255.0).
The cisco router has NAT enabled.
Whenever I try to establish a DCC connection (either to send or to chat over
IRC) it doesnt work, nor voice chatting, also I cant publish ANY personal
pages by using IIS or Apache.
I have called the ISP wondering, and they told me that if I used ADSL & NAT
then there would be some blocked ports (dunno why). and the only solution is
to have a leased line (which is much more than what I need as a normal user
@ home)

So let me ask in some other way:
how can I route some ports through some other ports from behind a firewall?

Thank you!

----- Original Message -----
From: "Marco Derix" <derx@lyrix.2y.net>
To: "Bold" <sslbsd@hotmail.com>
Cc: <misc@openbsd.org>
Sent: Monday, March 11, 2002 10:20 AM
Subject: Re: port routing


: Hi,
:
: probably port 53 (dns) is also wide open. If you have a box outside the
: firewall connected to the internet via NAT, then make a port mapping on
: that NAT-router from 53 to 22 (if this doesn't work, you'll have to use
: telnet...). This ofcourse, only works when this box isn't authoritive
: dns for one or more domains.
: When you've done that, just ssh (or telnet, but try ssh first) to your
: box on the outside on port 53.
: This works for me, and I can't believe they'll sack you for pumping a
: bit ssh over the dns port.
:
: Marco Derix
:
: Bold wrote:
:
: >Hello,
: >
: >If I have a firewall that allows me to surf the web (over port 80) but
: >doesn't allow any other outgoing ports, how can I route additional ports
: >through port 80 from behind your restrictive firewall?
: >
: >pointing to some man command or pointing to some port/application would
be
: >great.
: >
: >Thank you.