Hi, I have an arm-linux based router that does NAT (MASQUERADE) between private network (with ppp interfaces) and public network. When i tried to use windows Netmeeting application, i couldn't get video to pass trough my router, (from the public network to the private one it does NOT work, from the private to the public it DOES work). I found a h323 patch in netfilter cvs repository, and i applied it on my linux-2.4.17 kernel. But i am still blocked by the NAT router, and the patch doesn't change anything. I have turned debugging options on, and i'm sending the beginning of the trace below.
Does any one have an idea ? Does any one tried to use this patch on ARM ? Thank you, ==== Debugging trace ==== In this traces : 192.168.0.1 (ppp0) and 192.168.1.1 (eth0) are the two addresses from the NAT router, 192.168.1.9 is the PC on the public network, 192.168.0.2 is on the private network. I used command line : iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE ct_h225_help: help entered 192.168.0.2:1547->192.168.1.9:1720 ct_h225_help: Conntrackinfo = 2 nat_h323: dir ORIG at hook PREROUTING nat_h323: Not touching dir ORIG at hook PREROUTING nat_h323: dir ORIG at hook POSTROUTING h323_signal_address_fixup: no no nf_hook: hook 4 already set. skb: pf=7 (unowned) dev=eth0 len=48 nf_hook: hook 0 already set. skb: pf=2 (unowned) dev=br0 len=44 PROTO=6 192.168.1.9:1720 192.168.1.1:1547 L=44 S=0x00 I=15362 F=0x4000 T=128 ct_h225_help: help entered 192.168.1.9:1720->192.168.1.1:1547 ct_h225_help: tcplen = 24 nat_h323: dir REPLY at hook PREROUTING h323_signal_address_fixup: no no nat_h323: dir REPLY at hook POSTROUTING nat_h323: Not touching dir REPLY at hook POSTROUTING ip_finish_output: bad unowned skb = c0f17084: PRE_ROUTING LOCAL_IN FORWARD POST_ROUTING skb: pf=2 (unowned) dev=ppp0 len=44 PROTO=6 192.168.1.9:1720 192.168.0.2:1547 L=44 S=0x00 I=15362 F=0x4000 T=127 ct_h225_help: help entered 192.168.0.2:1547->192.168.1.9:1720 ct_h225_help: tcplen = 20 nat_h323: dir ORIG at hook PREROUTING nat_h323: Not touching dir ORIG at hook PREROUTING nat_h323: dir ORIG at hook POSTROUTING h323_signal_address_fixup: no no nf_hook: hook 4 already set. skb: pf=7 (unowned) dev=eth0 len=40 ct_h225_help: help entered 192.168.0.2:1547->192.168.1.9:1720 ct_h225_help: tcplen = 24 nat_h323: dir ORIG at hook PREROUTING nat_h323: Not touching dir ORIG at hook PREROUTING nat_h323: dir ORIG at hook POSTROUTING h323_signal_address_fixup: no no nf_hook: hook 4 already set. skb: pf=7 (unowned) dev=eth0 len=44 nf_hook: hook 0 already set. skb: pf=2 (unowned) dev=br0 len=40 PROTO=6 192.168.1.9:1720 192.168.1.1:1547 L=40 S=0x00 I=15618 F=0x4000 T=128 ct_h225_help: help entered 192.168.1.9:1720->192.168.1.1:1547 ct_h225_help: tcplen = 20 nat_h323: dir REPLY at hook PREROUTING h323_signal_address_fixup: no no nat_h323: dir REPLY at hook POSTROUTING nat_h323: Not touching dir REPLY at hook POSTROUTING ip_finish_output: bad unowned skb = c0f17084: PRE_ROUTING LOCAL_IN FORWARD POST_ROUTING skb: pf=2 (unowned) dev=ppp0 len=40 PROTO=6 192.168.1.9:1720 192.168.0.2:1547 L=40 S=0x00 I=15618 F=0x4000 T=127 ct_h225_help: help entered 192.168.0.2:1547->192.168.1.9:1720 nat_h323: dir ORIG at hook PREROUTING nat_h323: Not touching dir ORIG at hook PREROUTING After that, the trace continues with the same messages. -- Cl�ment Moreau Inventel Syst�mes -- www.inventel.com PARIS Meet Inventel at those shows / Nos prochains rendez-vous : - CeBIT 2002 March 13-20 Hall 27 / Booth F23 - Bluetooth Congress Amsterdam 2002 June 11-14 / Booth 401 **************************************************************************** Ce message et ses pieces jointes contiennent des informations confidentielles. Il est etabli a l'intention exclusive de ses destinataires. Si vous n'en etes pas destinataire, merci de le detruire et d'en avertir immediatement l'expediteur. L'integrite de ce message ne pouvant etre garantie sur Internet, Inventel Systemes ne peut etre tenue responsable de son contenu. This e-mail and its attachments are confidential and intended solely for the addressees. If you are not the intended recipient of this message, then please delete it and notify the sender. Since the integrity of this message cannot be guaranteed on the Internet,Inventel Systemes cannot therefore be considered responsible for its content. ****************************************************************************
