Well, I looked at the OpenH323 Gatekeeper site and docs.  As a
relatively unskilled Linux person, I would say it looks promising.
However, it would likely take me a long time to put it into my current
LEAF configuration even though I do have the space (80Meg DoC and 32Meg
RAM for a 5Meg binary!).

If anyone has or ends up being successful on implementing this on their
LEAF NAT, please let me (and of course the rest of the list) know how
you did it.

Thanks.

John

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Charles
Steinkuehler
Sent: Wednesday, January 22, 2003 1:54 PM
To: [EMAIL PROTECTED]
Subject: Re: [leaf-user] H323/NetMeeting support in Bering


Mike Noyes wrote:
> On Wed, 2003-01-22 at 09:47, Peter Nosko wrote:
>> pn] I realize that these distributions are produced by dedicated
volunteers and by no means do I
>> want to come across as being unappreciative of their efforts.  But
LEAF and NetMeeting have been
>> around for some time now, and it seems that coming up with a solution
for this should get some
>> lasting attention.  Is M$'s design truly solution-proof on LEAF
firewalls?

This is not a M$ thing, it's an H323 thing.  Apparently, the H323 
protocol was designed in some sort of space-time warp where firewalls 
are not required, there are more IP's than anyone would ever use (so no 
masquerading), servers don't have to be secured, and no-one ever gets 
any SPAM.  It sounds like the internet of the 70's (ARPA net), but I 
didn't think they were doing video conferencing back then...  :)

I don't personally use netmeeting, but I am somewhat familiar with the 
H323 protocol and have helped a few folks get it running.  IIRC, simply 
loading the h323 masquerading module (on 2.2 kernels), or it's 2.4 
iptables equivelent will get 90% of what most folks want...the ability 
to place outbound phone calls.

Adding a couple of port-forwards (and tweaking the in-bound firewall 
rules as required) will allow a single computer on the internal 
masqueraded network to recieve calls, which covers the last 10% of most 
users needs.

To go beyond this (ie multiple internal clients behind a masquerading 
firewall with the ability for any/all clients to both place and recieve 
calls), an H323 gateway (see OpenH323) needs to be installed.

Mike's links below, are excellent sources of information on getting H323

working with linux in general.

> Peter,
> I'm not sure if this will help, but have you considered using a
> Gatekeeper?
> 
> Linux NETMEETING HOWTO
> http://en.tldp.org/HOWTO/NetMeeting-HOWTO/
> 
> OpenH323 Project
> http://www.openh323.org/
> 
> Gateway Protocol Stack
> http://www.iec.org/online/tutorials/h323/topic06.html
> 
> OpenH323 Gatekeeper
> http://www.gnugk.org/
> 
> OpenGatekeeper H.323 Proxy
> http://openh323proxy.sourceforge.net/
> 
> Last resort Google string: linux netmeeting firewall

-- 
Charles Steinkuehler
[EMAIL PROTECTED]




-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to