Hi Gamer, 1. Does it work if you set ProxyForNAT=1 and ProxyForSameNAT=1 ? If so, is performance adequate in this mode? 2. Do you really need NAT3 in your system, e.g. to protect users on 192.168.0 from bad guys on 10.0.0 ? The usual reason for cascaded NATs is that you don't have administrative control over the one that connects to the Internet, but that is not your case, since you can call in. If you are using NAT3 as a switch, wireless access point, print server, etc., then you can keep all those functions, but not use it as a NAT. Just turn off its DHCP server, and plug the connection to NAT2 into a LAN port, using a crossover cable if there is no auto MDI/MDX or uplink port on either side. 3. Replace ep2 with one that sends RTP packets back to where it sees them coming from. 4. Configure or replace NAT3 with one that can proxy H.323 well enough for your need. 5. If NAT2 and NAT3 are smart enough, configure NAT3 as a non-NAT router. If I understand your situation correctly, there is nothing the GK can do, short of proxy, that will make this work. I suspect that ep1->ep3 works because it does proxy by default in that case. Regards, Stewart ----- Original Message ----- From: <interact.gamer@xxxxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Saturday, February 28, 2004 10:42 AM Subject: Gk Routed problem, can you help me? > NAT1 > 10.0.0.0/24--Public IP---------- > | | > ep1 | > | > Gnugk 2.2beta3(with public ip) > | > NAT2 | > 10.0.0.0/24--Public IP---------- > | > |ep2 (10.0.0.2) > | > | > 10.0.0.33 (NAT3) > 192.168.0.0/24 > | > | > ep3 (192.168.0.9) > > ep1 can make calls to ep2 and ep3. ep2 and ep3 can also makecalls > toep1. and ep3 can make calls to ep2, but ep2 can't make call correctly > toep3. > when ep2 calls ep3, ep2 can hear from ep3, but ep3 can't > hearanything.so i captured the packages. i found that the tcp packages were > tunneledby GK, and the RTP packages transferred directly between ep2 and > ep3.but the RTP packages from ep2 to ep3 are in wrong destination UDP port. > the ep3 sends RTP packages as 192.168.0.9:6002 --> > 10.0.0.2:6000,andthe NAT3 transferred them to 10.0.0.33:1284--> > 10.0.0.2:6000. then the RTP packages to ep3 that back from ep2 > are10.0.0.2:6000-->192.168.0.9:6002. and the NAT3 does not transfer them > toep3, then the RTP packages can't reach ep3. > i use Routed mode to the GK. am i right? or wath shall i do? > my gnugk.ini file > > [Gatekeeper::Main] > FourtyTwo=42 > StatusPort=7000 > > [GkStatus::Auth] > rule=allow > > [RoutedMode] > GKRouted=1 > H245Routed=1 > CallSignalPort=1721 > AcceptUnregisteredCalls=0 > RemoveH245AddressOnTunneling=1 > DropCallsByReleaseComplete=1 > SendReleaseCompleteOnDRQ=1 > SupportNATedEndpoints=1 > Q931PortRange=30000-39999 > H245PortRange=40000-49999 > > [Proxy] > Enable=0 > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > _______________________________________________ > List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Homepage: http://www.gnugk.org/ > ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/