Well, I looked at the OpenH323 Gatekeeper site and docs. As a relatively unskilled Linux person, I would say it looks promising. However, it would likely take me a long time to put it into my current LEAF configuration even though I do have the space (80Meg DoC and 32Meg RAM for a 5Meg binary!).
If anyone has or ends up being successful on implementing this on their LEAF NAT, please let me (and of course the rest of the list) know how you did it. Thanks. John -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Charles Steinkuehler Sent: Wednesday, January 22, 2003 1:54 PM To: [EMAIL PROTECTED] Subject: Re: [leaf-user] H323/NetMeeting support in Bering Mike Noyes wrote: > On Wed, 2003-01-22 at 09:47, Peter Nosko wrote: >> pn] I realize that these distributions are produced by dedicated volunteers and by no means do I >> want to come across as being unappreciative of their efforts. But LEAF and NetMeeting have been >> around for some time now, and it seems that coming up with a solution for this should get some >> lasting attention. Is M$'s design truly solution-proof on LEAF firewalls? This is not a M$ thing, it's an H323 thing. Apparently, the H323 protocol was designed in some sort of space-time warp where firewalls are not required, there are more IP's than anyone would ever use (so no masquerading), servers don't have to be secured, and no-one ever gets any SPAM. It sounds like the internet of the 70's (ARPA net), but I didn't think they were doing video conferencing back then... :) I don't personally use netmeeting, but I am somewhat familiar with the H323 protocol and have helped a few folks get it running. IIRC, simply loading the h323 masquerading module (on 2.2 kernels), or it's 2.4 iptables equivelent will get 90% of what most folks want...the ability to place outbound phone calls. Adding a couple of port-forwards (and tweaking the in-bound firewall rules as required) will allow a single computer on the internal masqueraded network to recieve calls, which covers the last 10% of most users needs. To go beyond this (ie multiple internal clients behind a masquerading firewall with the ability for any/all clients to both place and recieve calls), an H323 gateway (see OpenH323) needs to be installed. Mike's links below, are excellent sources of information on getting H323 working with linux in general. > Peter, > I'm not sure if this will help, but have you considered using a > Gatekeeper? > > Linux NETMEETING HOWTO > http://en.tldp.org/HOWTO/NetMeeting-HOWTO/ > > OpenH323 Project > http://www.openh323.org/ > > Gateway Protocol Stack > http://www.iec.org/online/tutorials/h323/topic06.html > > OpenH323 Gatekeeper > http://www.gnugk.org/ > > OpenGatekeeper H.323 Proxy > http://openh323proxy.sourceforge.net/ > > Last resort Google string: linux netmeeting firewall -- Charles Steinkuehler [EMAIL PROTECTED] ------------------------------------------------------- This SF.net email is sponsored by: Scholarships for Techies! Can't afford IT training? All 2003 ictp students receive scholarships. Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more. www.ictp.com/training/sourceforge.asp ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html