Getting identd to work behind SMC Router

[nd]

I have a SMC Barricade 4-port router and I can't for the life of me get ident to work, so I'm pretty much locked out of EFnet.

First of all, spare me the obvious replies I've already done the obvious. Port 113 is forwarded to my box, and it does work (I can telnet to my box on port 113 from another outside shell, and query the ident server manually). I even ssh'd to another box, telnetted to my ident server (port 113), and looked up the local port number of the ssh connection and did the ident manually (basically entered &quot;<local port> , 22&quot; <enter> and it worked great (returned user name, etc).

It's not some other IRC issue (e.g. ICMP unreach), since some ftp servers also query the ident and it fails also. Since I pretty much proved that my identd server is working fine, I'm convinced that somehow the router is mangling the local port numbers in the TCP packet headers (ident requires that you give the local and foreign port to give a valid reply). This would seem like a firmware issue, but I'm using the most recent one and I know people with this same router who have ident working successfully.

Any ideas? I'm not used to asking technical questions in this forum because I'm usually pretty independent, but I'm hoping someone is familiar with this issue.

Edit: Oh, and before anyone suggests it. DMZ is out of the question. What a waste that would be

 

[nd]

If I can't figure this out, I'm just going to hack up my ident server to make it not require a valid local port number. That should compenstate for the router's problem in theory. God bless open source

 

[sharkbitz]

Make your pc a DMZ host on your router. That should fix it. ---nevermind

I would however suggest getting an old pc, and running linux as your nat router instead of a hardware solution. This is what I do currently at my home.

 

[nd]

<< I would however suggest getting an old pc, and running linux as your nat router instead of a hardware solution. This is what I do currently at my home. >>

Actually, that's what I used to do. I had an old K5 PR100 box that I used IP Masquerading with. I ran the ident server on the that box itself (it was a special one specifically for IP masquerading). I had tons of problems with that box though. Memory was bad, and I used a badram patch which sort of fixed that.. but still had other hardware problems. I just didn't have the extra time to maintain the thing so I bought a router.

 

[nd]

OK, since you guys failed me, I went ahead and just made my own custom ident server. It works fine, but it's definitely a hack