I found it.
In fact my internal openphone asks the external openphone for the
gsm-06.10{sw} audio codec => everything goes well (on 56k bandwidth)
when call is started by the external openphone or netmeeting, it asks for a
less optimised audio codec (G.711 .... for openphone, ???? for netmeeting)
=> audio quality is bad
So, Gnugk proxy works well in both directions.
By the way their is no need for the flags
[RoutedMode]
SupportNATedEndpoints=1
[Proxy]
ProxyForNAT=1
because gnugk has direct acess to both end-points
The next question is: How to optimize codec negotiation to fit to the
available bandwidth? This may not be a gnugk question ......
And thank you, Igor, it was a good occasion to read the iptables tutorial
again.
Samuel
-----Message d'origine-----
De : openh323gk-users-admin@lists.sourceforge.net
[mailto:openh323gk-users-admin@lists.sourceforge.net]De la part de kompnet
Envoye : jeudi 8 janvier 2004 04:37
A : openh323gk-users@lists.sourceforge.net
Objet : Re: inbound calls with gnugk proxy & nat?
Sorry, Samuel.
Can't help you. I only use hardware to place calls.
Goto http://www.ethereal.com/
This is powerful tool for research of networking misunderstanding.
Igor.
В письме от 7 Январь 2004 21:35 Samuel KABAK написал:
> I tried with ACCEPT all, same result.
>
> http://www.ibiblio.org/pub/Linux/docs/HOWTO/Masquerading-Simple-HOWTO
tells
> that my iptables rules are good.
>
> May be I need a special rule for gnugk?
>
> I use openphone for both sides.
>
> -----Message d'origine-----
> De : openh323gk-users-admin@lists.sourceforge.net
> [mailto:openh323gk-users-admin@lists.sourceforge.net]De la part de kompnet
> Envoye : mercredi 7 janvier 2004 16:13
> A : openh323gk-users@lists.sourceforge.net
> Objet : Re: inbound calls with gnugk proxy & nat?
>
>
> There are some errors in your iptables rules:
> 1) Only 1 interface was configured
> 2) You fogot about OUTPUT chain
> Check your rules carefully.
> Try to ACCEPT all and then place call.
> Look at Iptables Tutorial, there are some scripts which you can
> use as base scripts to your case.
> Igor.
>
> В письме от 7 Январь 2004 14:31 Samuel KABAK написал:
> > I configured opengk 2.0.5 on a debian linux box as proxy.
> >
> > pc1@Internet <-> [Nat box, gnugk proxy] <-> pc2@192.168.0.0/24
> >
> > Both pc1 & pc2 can register,
> > Both pc1 & pc2 can call each other
> >
> > When pc2 calls pc1, every thing is ok
> > When pc1 calls pc2, voice is bad (openphone log shows many lost packets)
> >
> > Control signals (ring/start/stop) seem to be transmitted correctly in
> > both directions
> >
> > The Nat box is an iptables forwading that accepts udp & tcp above 1024.
> >
> > iptables -F;
> > iptables -t nat -F;
> > iptables -t mangle -F;
> > iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE;
> > iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT;
> > iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT;
> > iptables -P INPUT DROP;
> > iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT;
> > iptables -A INPUT --protocol tcp --dport 1024:65536 -j ACCEPT
> > iptables -A INPUT --protocol udp --dport 1024:65536 -j ACCEPT
> > echo 1 > /proc/sys/net/ipv4/ip_forward
> >
> > The gnugk .ini is
> >
> > [Gatekeeper::Main]
> > Fourtytwo=42
> > Name=h323gk
> > TimeToLive=600
> > EndpointIDSuffix=_ep
> >
> > [RoutedMode]
> > GKRouted=1
> > H245Routed=1
> > CallSignalPort=1720
> > CallSignalHandlerNumber=2
> > AcceptUnregisteredCalls=0
> > RemoveH245AddressOnTunneling=0
> > DropCallsByReleaseComplete=1
> > SendReleaseCompleteOnDRQ=1
> > SupportNATedEndpoints=1
> > H245PortRange=30000-30019
> > Q931PortRange=30020-30039
> >
> > [RasSrv::ARQFeatures]
> > CallUnregisteredEndpoints=1
> >
> > [Proxy]
> > Enable=1
> > InternalNetwork=192.168.0.0/24,127.0.0.1/8
> > ProxyForNAT=1
> > ProxyForSameNAT=0
> > T120PortRange=50000-50019
> > RTPPortRange=50000-50019
> >
> > #Plus other radauth stuffs
> > ....
> >
> > In the manual of gnugk, I read:
> > Since 2.0.2, the GnuGK supports NAT outbound calls (from an endpoint
>
> behind
>
> > NAT to public networks) directly without any necessary modification of
> > endpoints or NAT box. Just register the endpoint with the GnuGK and you
>
> can
>
> > make call now.
> >
> > This is true because I tested it successfully.
> >
> > What about inbound call?
> >
> > Notice that I didn't apply the iptables h323 kernel patch and i don't
> > want to.
> >
> > Thanks for your help
> >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: IBM Linux Tutorials.
> > Become an expert in LINUX or just sharpen your skills. Sign up for
IBM's
> > Free Linux Tutorials. Learn everything from the bash shell to sys
admin.
> > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> > _______________________________________________
> > List: Openh323gk-users@lists.sourceforge.net
> > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> > Homepage: http://www.gnugk.org/
>
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
> Free Linux Tutorials. Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=ick
> _______________________________________________
> List: Openh323gk-users@lists.sourceforge.net
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id-49
> Homepage: http://www.gnugk.org/
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______________________________________________
> List: Openh323gk-users@lists.sourceforge.net
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id-49
> Homepage: http://www.gnugk.org/
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id-49
Homepage: http://www.gnugk.org/
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id┘49
Homepage: http://www.gnugk.org/
