Mike Noyes wrote:
This is not a M$ thing, it's an H323 thing. Apparently, the H323 protocol was designed in some sort of space-time warp where firewalls are not required, there are more IP's than anyone would ever use (so no masquerading), servers don't have to be secured, and no-one ever gets any SPAM. It sounds like the internet of the 70's (ARPA net), but I didn't think they were doing video conferencing back then... :)On Wed, 2003-01-22 at 09:47, Peter Nosko wrote:pn] I realize that these distributions are produced by dedicated volunteers and by no means do I want to come across as being unappreciative of their efforts. But LEAF and NetMeeting have been around for some time now, and it seems that coming up with a solution for this should get some lasting attention. Is M$'s design truly solution-proof on LEAF firewalls?
I don't personally use netmeeting, but I am somewhat familiar with the H323 protocol and have helped a few folks get it running. IIRC, simply loading the h323 masquerading module (on 2.2 kernels), or it's 2.4 iptables equivelent will get 90% of what most folks want...the ability to place outbound phone calls.
Adding a couple of port-forwards (and tweaking the in-bound firewall rules as required) will allow a single computer on the internal masqueraded network to recieve calls, which covers the last 10% of most users needs.
To go beyond this (ie multiple internal clients behind a masquerading firewall with the ability for any/all clients to both place and recieve calls), an H323 gateway (see OpenH323) needs to be installed.
Mike's links below, are excellent sources of information on getting H323 working with linux in general.
Peter, I'm not sure if this will help, but have you considered using a Gatekeeper?Linux NETMEETING HOWTO http://en.tldp.org/HOWTO/NetMeeting-HOWTO/ OpenH323 Project http://www.openh323.org/ Gateway Protocol Stack http://www.iec.org/online/tutorials/h323/topic06.html OpenH323 Gatekeeper http://www.gnugk.org/ OpenGatekeeper H.323 Proxy http://openh323proxy.sourceforge.net/ Last resort Google string: linux netmeeting firewall
-- Charles Steinkuehler [EMAIL PROTECTED] ------------------------------------------------------- This SF.net email is sponsored by: Scholarships for Techies! Can't afford IT training? All 2003 ictp students receive scholarships. Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more. www.ictp.com/training/sourceforge.asp ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html