I'm trying to configure two gnugk proxy servers to route between two private NATted networks.
LAN<--->GK1<--->NAT/FW<------------Internet------------->NAT/FW<-->GK2<-->LAN
The firewalls are not the problem as they are not rejecting or dropping any packets between the two systems. I've looked at the debugging log files and it seems that the connection info is being passed between the two gateways but is being rejected. I'm thinking that their needs to be some authentication done between the proxy neighbours but I'm not sure how to do it. Could someone please help?
I've included status output and the config files for both the proxy servers.
Message output from status interface for GK1:
IRQ|172.16.12.7:3335|6795_endp;
IRQ|172.16.12.7:3335|6795_endp;
IRQ|172.16.12.7:3335|6795_endp;
LCF|219.133.29.56|6795_endp|itdale:h323_ID|OpenH323GK;
LCF|219.133.29.56|6795_endp|itdale:h323_ID|OpenH323GK;
ARJ|172.16.12.7:1720|stevepcm:h323_ID|itdale:h323_ID=314:dialedDigits=itdale:h323_ID=314:dialedDigits|false|calledPartyNotRegistered;
LCF|219.133.29.56|6795_endp|itdale:h323_ID|OpenH323GK;
IRQ|172.16.12.7:3335|6795_endp;
LRJ|219.133.29.56|203.42.120.5:h323_ID|OpenH323GK|requestDenied;
LRJ|219.133.29.56|172.16.1.24:h323_ID|OpenH323GK|requestDenied;
LCF|219.133.29.56|6795_endp|itdale:h323_ID|OpenH323GK;
LCF|219.133.29.56|6795_endp|itdale:h323_ID|OpenH323GK;
LCF|219.133.29.56|6795_endp|itdale:h323_ID|OpenH323GK;
IRQ|172.16.12.7:3335|6795_endp;
IRQ|172.16.12.7:3335|6795_endp;
Config file for GK1:
GK1
===
[Gatekeeper::Main]
Fourtytwo=42
TimeToLive=300
[RoutedMode]
GKRouted=1
H245Routed=1
AcceptUnregisteredCalls=1
SupportNATedEndpoints=1
H245PortRange=30000-30020
Q931PortRange=40000-40020
[Proxy]
Enable=1
RTPPortRange=50000-50020
T120PortRange=60000-60020
[GkStatus::Auth]
rule=allow
[Gatekeeper::Auth]
default=allow
[RasSrv::Neighbors]
GK2=219.133.29.56;*
Config file for GK2:
GK2
===
[Gatekeeper::Main]
Fourtytwo=42
TimeToLive=300
[RoutedMode]
GKRouted=1
H245Routed=1
AcceptUnregisteredCalls=1
SupportNATedEndpoints=1
H245PortRange=30000-30020
Q931PortRange=40000-40020
[Proxy]
Enable=1
RTPPortRange=50000-50020
T120PortRange=60000-60020
[GkStatus::Auth]
rule=allow
[Gatekeeper::Auth]
default=allow
[RasSrv::Neighbors]
GK1=203.42.120.5;*
Regards,
Ian Dale
MIS Manager
Com10 International Pty. Ltd.
* itdale@com10.com.au
( +61 2 9722 3314
È
6 +61 2 9722 3343
