As Antony would say, put a LOG entry before your end DROP to see what is not being allowed for the communication, while doing H323.
Another way is to tcpdump/ethereal both the external and the internal interface to see what is required and what is blocked. Once your H323 session works you can be sure that ip_conntrack_h323 and ip_nat_h323 are doing their jobs. Maybe someone else can give you a better/easier way to check this. Ramin On Tue, May 21, 2002 at 10:20:04AM -0600, Omar Castaneda Acosta wrote: > Hello: > > What would be the best way to setup my rules for H323 so I can receive > incoming calls? > I've got kernel 2.4.18-newnat13+helpers & iptables 1.2.6a. > > I'm currently forwarding port 1720, how can I check if the ip_nat_h323 > and/or ip_conntrack_h323 are handling the traffic ? > > -- Omar
