Mike Noyes wrote:
On Wed, 2003-01-22 at 09:47, Peter Nosko wrote:
pn] I realize that these distributions are produced by dedicated volunteers and by no means do I
want to come across as being unappreciative of their efforts.  But LEAF and NetMeeting have been
around for some time now, and it seems that coming up with a solution for this should get some
lasting attention.  Is M$'s design truly solution-proof on LEAF firewalls?
This is not a M$ thing, it's an H323 thing. Apparently, the H323 protocol was designed in some sort of space-time warp where firewalls are not required, there are more IP's than anyone would ever use (so no masquerading), servers don't have to be secured, and no-one ever gets any SPAM. It sounds like the internet of the 70's (ARPA net), but I didn't think they were doing video conferencing back then... :)

I don't personally use netmeeting, but I am somewhat familiar with the H323 protocol and have helped a few folks get it running. IIRC, simply loading the h323 masquerading module (on 2.2 kernels), or it's 2.4 iptables equivelent will get 90% of what most folks want...the ability to place outbound phone calls.

Adding a couple of port-forwards (and tweaking the in-bound firewall rules as required) will allow a single computer on the internal masqueraded network to recieve calls, which covers the last 10% of most users needs.

To go beyond this (ie multiple internal clients behind a masquerading firewall with the ability for any/all clients to both place and recieve calls), an H323 gateway (see OpenH323) needs to be installed.

Mike's links below, are excellent sources of information on getting H323 working with linux in general.

Peter,
I'm not sure if this will help, but have you considered using a
Gatekeeper?

Linux NETMEETING HOWTO
http://en.tldp.org/HOWTO/NetMeeting-HOWTO/

OpenH323 Project
http://www.openh323.org/

Gateway Protocol Stack
http://www.iec.org/online/tutorials/h323/topic06.html

OpenH323 Gatekeeper
http://www.gnugk.org/

OpenGatekeeper H.323 Proxy
http://openh323proxy.sourceforge.net/

Last resort Google string: linux netmeeting firewall
--
Charles Steinkuehler
[EMAIL PROTECTED]




-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to