Re: H323, Netmeeting and Videoconference

[Stefan_Walther]

Hi Ryan, hi folks,

I have alraedy installed the contrack-helper modul. I got the last cvs at the I compiled the new kernel. But video won't work up to this time. Is there any other advice you can tell me, that this will work???

THX

Best Regards,
MfG.

Stefan Walther
[EMAIL PROTECTED]
dienst.: +4930/89786448
Funk: +49172/3943961




You need to install a ip connection tracking helper module for h.323 to
work with linuxiptables. I'm not completely positive of the steps to get this, but I know
you need to downloadthe latest iptables source package from netfilter.samba.org (see the
downloads link on theleft). In that package, there's a patch for the kernel to add h.323
support. I have used it forprevious kernels and it has worked well for me. Good luck!

Ryan
[EMAIL PROTECTED]

>
Hi folks,
>
> at first thanks for the fast fix for NEWNAT in the last weeks.
>
> Now I had
installed it with kernel 2.4.18, but there is one problem
> left.  Maybe there is someone who
can tell me how I can fix it.
>
> Netmeeting now works fine except the videoconference. I
can access the
> whiteboard and the chat, but I cannot see the video or can hear the
> audio
from my partner on the other side. The same way is the other way
> around.
>
> I had
configured everthing directly to the kernel no modules. I have
> and  T-DSL con and I'm using
masquerading.
>
> Here is my config:
>
>
>
> Best Regards,
> MfG.
>
> Stefan
Walther
> [EMAIL PROTECTED]
> dienst.: +4930/89786448
> Funk:
+49172/3943961#!/bin/bash
>
> <--snip-->
> # set -x
>
> EXT="ppp0"
> INT="eth0"
>
LO="lo"
>
> INTIP="192.168.0.1"
> ANY="Any/0"
> PRIVP="0:1023"
>
UNPRI="1024:65535"
>
> echo 1 > /proc/sys/net/ipv4/tcp_syncookies
> for f in
/proc/sys/net/ipv4/conf/*/rp_filter; do
>        echo 1 > f
> done
> echo 1 >
/proc/sys/net/ipv4/ip_forward
>
> iptables -P INPUT DROP
> iptables -P OUTPUT DROP
>
iptables -P FORWARD DROP
> iptables -X
> iptables -F
> iptables -t nat -F
> iptables -t nat -
X
>
> iptables -A INPUT   -i $INT -j ACCEPT
> iptables -A OUTPUT  -o $INT -j ACCEPT
> iptables -A
FORWARD -i $INT -j ACCEPT
> iptables -A FORWARD -o $INT -j ACCEPT
>
> iptables -A INPUT  -i $LO -j
ACCEPT
> iptables -A OUTPUT -o $LO -j ACCEPT
>
> iptables -t nat -A POSTROUTING -o $EXT -j
MASQUERADE
> iptables -A FORWARD -i $EXT -m state --state ESTABLISHED,RELATED -j
> ACCEPT
iptables -A FORWARD -i $EXT -m state --state NEW -j ACCEPT
>
> iptables -A OUTPUT -o $EXT -p udp --sport
1024:65535 --dport 53 -j
> ACCEPT iptables -A INPUT  -i $EXT -p udp --sport 53 --dport 1024:65535
> -j
ACCEPT iptables -A OUTPUT -o $EXT -p tcp --sport $UNPRI --dport 53
> -j ACCEPT iptables -A INPUT  -i $EXT -p
tcp --sport 53 --dport $UNPRI
> -j ACCEPT
>
> iptables -A FORWARD -i $EXT -p tcp --dport 113 --syn -j
REJECT
>
> iptables -A INPUT -j LOG --log-prefix "input "
> iptables -A OUTPUT -j LOG --log-prefix
"output "
> iptables -A FORWARD -j LOG --log-prefix "forward "
> <--snip-->