Bonjour, Je cherche à rajouter la gestion du protocole H.323 (vidéo-conférence, gnomemeeting, etc...) sur une passerelle qui réalise du masquerading. Je n'arrive pas à patcher correctement le noyau (voir pièce-jointe), alors que google me dit que ça marche... Est-ce que quelqu'un a déjà réalisé la manip ou a une petite idée?? Merci
Émile -- L'évolution de la pensée pré-situationniste entre l'école hégélienne et le négativisme de l'infrastructure néo-nietzschéenne a-t-elle, inconsciemment ou non, influencé la carrière de Raymond Poulidor ? Pierre Desproges.
Already applied: submitted/2.4.14 submitted/2.4.18 submitted/2.4.4 submitted/ah-esp submitted/conntrack+nat-helper-unregister submitted/ip6tables-export-symbols submitted/ip6t_mac-fix-ipv6 submitted/ip_conntrack_protocol_destroy submitted/ip_conntrack_protocol_unregister submitted/ip_nat_irc-srcaddr-fix submitted/ipqueue-ipv6 submitted/ipt_mac-fix submitted/ipt_MIRROR-ttl submitted/ipt_REJECT-checkentry submitted/ipt_unclean-ecn submitted/irc-dcc-mask submitted/mangle5hooks submitted/module-license submitted/sackperm submitted/skb_clone_copy submitted/tcp-MSS submitted/TOS-oops-fix submitted/ulog pending/conntrack Testing... 0-newnat13.patch NOT APPLIED (98 rejects out of 100 hunks) The pending/0-newnat13 patch: Author: Harald Welte <[EMAIL PROTECTED]>, Jozsef Kadlecsik <[EMAIL PROTECTED]> Status: Pending for kernel inclusion Implementation of the new nat API for kernel 2.4.18 and above. - enables us to have multiple related expectations (necessarry for H.323, real IRC and PPTP tracking, ...) - allows expectations to have timeouts - adds full SACK support to the NAT code (we no longer strip SACKPERM option out of all SYN patckes for ftp/irc connections) ----------------------------------------------------------------- Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y Testing patch pending/0-newnat13.patch... Failed to patch copy of /usr/src/linux TEST FAILED: patch NOT applied. Testing... h323-conntrack-nat.patch NOT APPLIED ( 3 missing files) The extra/h323-conntrack-nat patch: Author: Jozsef Kadlecsik <[EMAIL PROTECTED]> Status: Alpha This adds CONFIG_IP_NF_H323: H.323/netmeeting support module for netfilter connection tracking and NAT. H.323 uses/relies on the following data streams: Port Description 389 Internet Locator Server (TCP) 522 User Location Server (TCP) 1503 T.120 Protocol (TCP) 1720 H.323 (H.225 call setup, TCP) 1731 Audio call control (TCP) Dynamic H.245 call control (TCP) Dynamic RTCP/RTP streaming (UDP) The H.323 conntrack/NAT modules support the connection tracking/NATing of the data streams requested on the dynamic ports. The helpers use the search/replace hack from the ip_masq_h323.c module for the 2.2 kernel series. At the very minimum, H.323/netmeeting (video/audio) is functional by letting trough the 1720 port and loading these H.323 module(s). The H.323 conntrack/NAT modules do not support - H.245 tunnelling - H.225 RAS (gatekeepers) ----------------------------------------------------------------- Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y Testing patch extra/h323-conntrack-nat.patch... Placed new Config.in line Placed new Config.in line Placed new Configure.help entry Placed new Makefile line Could not find place to slot in ip_conntrack.h line Could not find place to slot in ip_conntrack.h line Could not find place to slot in ip_conntrack.h line TEST FAILED: patch NOT applied.