There are two problems with NM: One is that NM dynamically allocates ports,
which means you need to let the whole port range (1024-65535) through, which
pretty much defeats the purpose of a firewall.
The second problem is that NM puts the local machine's IP address in the packet
body. The other side then uses that IP address to send data to you. Since this
is most likely an IP address in the private range (e.g., 192.168.*), no router
in the world is going to route these packets back to you.
So what would be needed probably is a module like the ip_masq_ftp module to
actually change the IP address in the packets.
-Joe
tekno wrote:
>
> Hi guys,
>
> Ok I saw the previous post with the gateway stuff for running Netmeeting
> in the private network. But this gateway is commercial software... Isn't
> there a way to tweak the Masq rules to get Netmeeting working.
>
> I tried with the default masq setup and i can connect to the uls server,
> i can phone someone, i can chat with him... the only thing i can't is
> hear the other talking, he or she can hear me though. I didn't check out
> which ports Netmeeting uses yet and i firewalled all ports from 1-1024
> for incoming packets but i guess this is not problem cause our internet
> provider (cable) does the same for disabling www servers from their
> customers.
>
> Anyone an idea ?
>
> thx
>
> Tom
> [EMAIL PROTECTED]
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> http://tiffany.indyramp.com/mailman/listinfo/masq
> Admin requests can be handled by web (above) or [EMAIL PROTECTED]
--
-------------------------------------------------------------------
Joachim Feise Ph.D. Student, Information & Computer Science
mailto:[EMAIL PROTECTED] http://www.ics.uci.edu/~jfeise/
mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
-------------------------------------------------------------------
"You mean that's it?" said Ford. "That's it."
"Six by Nine. Forty-two" "That's it. That's all there is."
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
