Conntrack helpers for ICQ and MSN Messenger

Rob Sterenborg rob at
Sat Sep 11 10:17:51 CEST 2004

netfilter-bounces at wrote:
> Hello.
> I have some clients in my LAN that need to access ICQ and MSN
> Messenger. Reading some iptables tutorials, I discovered that ICQ and
> MSN Messenger protocols are some kind of "complex protocols"
> because they send some information about openning new
> connections back inside the payload of the packets.
> So, iptables needs some CONNTRACK and/or NAT helpers to let this
> protocols work properly. I looked for it on NETFILTER home page but I
> didn't find it. So, I need some help about it!

AFAIK, there are no ICQ or MSN helpers for Netfilter.

You can use portforwarding for one ICQ or MSN client for direct access
like filetransfer.
OTOH if you want to use these capabilities with multiple clients you
could setup a socks proxy, like the old one from NEC (the source should
be available somewhere), and configure the clients to use it.


More information about the netfilter mailing list