RE: [ MyHost ( MyPhone-GnuGK ) ] -.....

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Rolf,
I'd suffered just like you do right now, begining is almost always hard. i'ven't followed your previous posts but from this one i guess that you've a problem gnugk and nat just as i had weeks ago.
I'll will first send you a config file;complete it; and do some tests (don't forget to save the traces).
//-----------------------------------------Start Config file------------------------------------------------------------//
[Gatekeeper::Main]
Fourtytwo=42
Name=EqSen
TotalBandwidth=100000



[GkStatus::Auth] rule=allow

[RoutedMode]
GKRouted=1
H245Routed=1
CallSignalPort=1721
CallSignalHandlerNumber=2
RemoveH245AddressOnTunneling=1
DropCallsByReleaseComplete=1
SupportNATedEndpoints=1
Q931PortRange=30000-39999
H245PortRange=40000-49999
SendReleaseCompleteOnDRQ=1
ForwardOnFacility=1
ShowForwarderNumber=1

[Proxy]
Enable=1
InternalNetwork=192.168.0.1/255.255.255.0
T120PortRange=50000-59999
RTPPortRange=5000-5020
ProxyForNAT=1
ProxyForSameNAT=1

[Endpoint]
Gatekeeper=xxx.xxx.xxx.xxx
Type=Gateway
H323ID=myGK
E164=0022121
Prefix=221
RRQRetryInterval=10

[Gatekeeper::Auth]
default=allow

[RasSRV::LRQFeatures]
ForwardHopCount=3

[RasSrv::PermanentEndpoints]
xxx.xxx.xxx.xxx=TEST;00

[RasSrv::RRQFeatures]
OverwriteEPOnSameAddress=1
//------------------------------------------end-------------------------------------------------------------------------//
it works for me undr these 2 environment:
1°) EP----------Gnugk(a box with 2 IP--privae and public)-------NET----------Gw
2°) EP----------GNUGK(a box with only one private interface)-------ModemADSL-------NET----GW


Please let me know the results.
Regards,
Ibrahima.



From: openh323gk-users-request@xxxxxxxxxxxxxxxxxxxxx
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Subject: Openh323gk-users digest, Vol 1 #1227 - 9 msgs
Date: Mon, 28 Jun 2004 05:59:11 -0700

Send Openh323gk-users mailing list submissions to
	openh323gk-users@xxxxxxxxxxxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
	https://lists.sourceforge.net/lists/listinfo/openh323gk-users
or, via email, send a message with subject or body 'help' to
	openh323gk-users-request@xxxxxxxxxxxxxxxxxxxxx

You can reach the person managing the list at
	openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Openh323gk-users digest..."


Today's Topics:

1. BUG REPORT: GNUGK CRASHES. CVS by June 25th 2004 (Oleg Ustinov)
2. Re: [ MyHost ( MyPhone-GnuGK ) ] - [ MyWall (
NAT )] - Internet - [ Voxgratia ( OpenAM ) ] (Rolf Sponsel)
3. Re: BUG REPORT: GNUGK CRASHES. CVS by June 25th 2004 (Zygmuntowicz Michal)
4. Re: Different User Names appeared in Access Request and Accounting Request sent to Radius Server (Zygmuntowicz Michal)
5. Re: Different User Names appeared in Access Request and Accounting Request sent to Radius Server (Thomas Tam)
6. Re: Different User Names appeared in Access Request and Accounting Request sent to Radius Server (Thomas Tam)
7. Re: [ MyHost ( MyPhone-GnuGK ) ] - [ MyWall (
NAT )] - Internet - [ Voxgratia ( OpenAM ) ] (Rolf Sponsel)


--__--__--

Message: 1
From: "Oleg Ustinov" <O2Ustinov@xxxxxxxxxx>
To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 28 Jun 2004 00:59:09 +0200
Subject: BUG REPORT: GNUGK CRASHES. CVS by June 25th 2004
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx


This is a multi-part message in MIME format.

------=_NextPart_000_00FF_01C45CAB.1EFA0000
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hello List.

Found trouble:

CVS by 25 June, 2004.
After receiving Setup message call is rejected because security does not
matched (don't know why!), then wrote CDR and then crash. See attached debug
trace level 6


In previous version of CVS - it was fully OK. After restart GNUGK with
previous build version - same user and same called number gone thru and
finished after 10 minutes.

Should I make changes in Config? Or it is really BUG.

Has some body same troubles?

PS. With other customers (CISCO and MERA based), GNUGk shown normal
username, CLID and no IP address as username, etc.
With this one (used CTI systems) and think other with NEXTONE, this problem
come again.

Best regards,
Oleg

------=_NextPart_000_00FF_01C45CAB.1EFA0000
Content-Type: text/plain;
	name="new_troubles_gnugk.txt"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="new_troubles_gnugk.txt"

2004/06/27 23:33:34.112 5       ProxyChannel.cxx(471)   Q931s   Reading =
from x.x.x.x:1078
2004/06/27 23:33:34.112 3       ProxyChannel.cxx(680)   Q931s   =
Received: Setup CRV=3D9009 from x.x.x.x:1078
2004/06/27 23:33:34.114 4       ProxyChannel.cxx(633)   Q931    =
Received: {
  q931pdu =3D {
    protocolDiscriminator =3D 8
    callReference =3D 9009
    from =3D originator
    messageType =3D Setup
    IE: Bearer-Capability =3D {
      80 90 a3                                           ...
    }
    IE: Display =3D {
      6c 74 6b 2d 6b 73 75 61  70 64 38 31 65 63 72 00   =
ltk-ksuapd81ecr.
    }
    IE: Called-Party-Number =3D {
      81 31 32 31 37 34 39 37  39 31 33 37               .12174979137
    }
    IE: User-User =3D {
      20 b8 06 00 08 91 4a 00  04 01 40 00 00 00 28 c0    =
.....J...@...(.
      b2 00 0e da 11 53 6d 69  6c 65 20 43 54 49 20 53   .....Smile CTI =
S
      65 72 76 65 72 00 00 04  33 2e 30 00 00 00 01 05   =
erver...3.0.....
      00 45 4a 7c ac 46 a0 51  17 d0 89 06 b8 00 80 16   =
.EJ|.F.Q........
      64 31 00 c7 d8 11 00 01  cd c8 43 bb 8b a6 00 5d   =
d1........C....]
      1d 80 07 00 d9 4a 9a 13  04 36 11 00 80 16 64 31   =
.....J...6....d1
      00 c7 d8 11 00 01 cd c8  43 bb 8b a6 61 04 12 00   =
........C...a...
      00 64 0d 60 03 80 0a 04  00 01 00 d9 4a 9a 13 27   =
.d.`........J..'
      2d 12 00 00 65 0d 40 03  80 0a 04 00 01 00 d9 4a   =
-...e.@........J
      9a 13 27 2d 1c 40 00 00  06 04 00 4d 60 03 80 11   =
..'-.@.....M`...
      14 00 01 00 d9 4a 9a 13  27 2c 00 d9 4a 9a 13 27   =
.....J..',..J..'
      2d 1c 40 00 00 06 04 00  4d 40 03 80 11 14 00 01   =
-.@.....M@......
      00 d9 4a 9a 13 27 2c 00  d9 4a 9a 13 27 2d 01 00   =
..J..',..J..'-..
      01 00 01 00 01 00 02 80  01 00                     ..........
    }
  }
  h225pdu =3D {
    h323_uu_pdu =3D {
      h323_message_body =3D setup {
        protocolIdentifier =3D 0.0.8.2250.0.4
        sourceAddress =3D 1 entries {
          [0]=3Dh323_ID  1 characters {
            0000                                      =20
          }
        }
        sourceInfo =3D {
          vendor =3D {
            vendor =3D {
              t35CountryCode =3D 178
              t35Extension =3D 0
              manufacturerCode =3D 3802
            }
            productId =3D  18 octets {
              53 6d 69 6c 65 20 43 54  49 20 53 65 72 76 65 72   Smile =
CTI Server
              00 00                                              ..
            }
            versionId =3D  5 octets {
              33 2e 30 00 00                                     3.0..
            }
          }
          gateway =3D {
          }
          mc =3D FALSE
          undefinedNode =3D FALSE
        }
        destinationAddress =3D 1 entries {
          [0]=3DdialedDigits "12174979137"
        }
        destCallSignalAddress =3D ipAddress {
          ip =3D  4 octets {
            51 17 d0 89                                        Q...
          }
          port =3D 1720
        }
        activeMC =3D FALSE
        conferenceID =3D  16 octets {
          80 16 64 31 00 c7 d8 11  00 01 cd c8 43 bb 8b a6   =
..d1........C...
        }
        conferenceGoal =3D create <<null>>
        callType =3D pointToPoint <<null>>
        sourceCallSignalAddress =3D ipAddress {
          ip =3D  4 octets {
            d9 4a 9a 13                                        .J..
          }
          port =3D 1078
        }
        callIdentifier =3D {
          guid =3D  16 octets {
            80 16 64 31 00 c7 d8 11  00 01 cd c8 43 bb 8b a6   =
..d1........C...
          }
        }
        fastStart =3D 4 entries {
          [0]=3D 18 octets {
            00 00 64 0d 60 03 80 0a  04 00 01 00 d9 4a 9a 13   =
..d.`........J..
            27 2d                                              '-
          }
          [1]=3D 18 octets {
            00 00 65 0d 40 03 80 0a  04 00 01 00 d9 4a 9a 13   =
..e.@........J..
            27 2d                                              '-
          }
          [2]=3D 28 octets {
            40 00 00 06 04 00 4d 60  03 80 11 14 00 01 00 d9   =
@.....M`........
            4a 9a 13 27 2c 00 d9 4a  9a 13 27 2d               =
J..',..J..'-
          }
          [3]=3D 28 octets {
            40 00 00 06 04 00 4d 40  03 80 11 14 00 01 00 d9   =
@.....M@........
            4a 9a 13 27 2c 00 d9 4a  9a 13 27 2d               =
J..',..J..'-
          }
        }
        mediaWaitForConnect =3D FALSE
        canOverlapSend =3D FALSE
        multipleCalls =3D FALSE
        maintainConnection =3D FALSE
      }
      h245Tunneling =3D FALSE
    }
  }
}
2004/06/27 23:33:34.114 5              Routing.h(145)   ROUTING Checking =
policy Explicit for request Setup CRV=3D9009
2004/06/27 23:33:34.114 5              Routing.h(145)   ROUTING Checking =
policy Internal for request Setup CRV=3D9009
2004/06/27 23:33:34.114 2             RasTbl.cxx(523)   GK      Gateway =
7122_endp match 1
2004/06/27 23:33:34.115 4             RasTbl.cxx(880)   Alias match for =
GW 69.28.253.162:1720
2004/06/27 23:33:34.115 5              Routing.h(151)   ROUTING Policy =
Internal applied to the request Setup CRV=3D9009
2004/06/27 23:33:34.115 2             RasTbl.cxx(1702)  =
CallTable::Insert(CALL) Call No. 11, total sessions : 4
2004/06/27 23:33:34.115 3           radproto.cxx(1879)  RADIUS  Sending =
PDU ( 243 bytes) to RADIUS server localhost (127.0.0.1:1812) from =
port:62947[0,29-31], PDU: {
      code =3D 1 (Access-Request)
      id =3D 30
      length =3D 243 octets
      authenticator =3D 16 octets {
        95 37 ec 44 6e 8c c1 90  98 59 90 eb 3d 20 46 70   =
.7.Dn....Y..=3D Fp
      }
      attributes =3D 12 elements {
        [0]=3D {
          type =3D 1 (User-Name)
          length =3D 15 octets
          value =3D 13 octets {
            32 31 37 2e 37 34 2e 31  35 34 2e 31 39            x.x.x.x
          }
        }
        [1]=3D {
          type =3D 2 (User-Password)
          length =3D 18 octets
          value =3D 16 octets {
            fd 10 68 df 82 be 09 52  23 c1 ee 75 1a 47 0c 94   =
..h....R#..u.G..
          }
        }
        [2]=3D {
          type =3D 4 (NAS-IP-Address)
          length =3D 6 octets
          value =3D 4 octets {
            51 17 d0 89                                        Q...
          }
        }
        [3]=3D {
          type =3D 32 (NAS-Identifier)
          length =3D 12 octets
          value =3D 10 octets {
            4e 45 43 54 49 53 2d 47  57 31                     =
NECTIS-GW1
          }
        }
        [4]=3D {
          type =3D 61 (NAS-Port-Type)
          length =3D 6 octets
          value =3D 4 octets {
            00 00 00 05                                        ....
          }
        }
        [5]=3D {
          type =3D 6 (Service-Type)
          length =3D 6 octets
          value =3D 4 octets {
            00 00 00 01                                        ....
          }
        }
        [6]=3D {
          type =3D 8 (Framed-IP-Address)
          length =3D 6 octets
          value =3D 4 octets {
            d9 4a 9a 13                                        .J..
          }
        }
        [7]=3D {
          type =3D 30 (Called-Station-Id)
          length =3D 13 octets
          value =3D 11 octets {
            31 32 31 37 34 39 37 39  31 33 37                  =
12174979137
          }
        }
        [8]=3D {
          type =3D 26 (Vendor-Specific)
          length =3D 51 octets
          vendorId =3D 9
          vendorValue =3D 45 octets {
            18 2d 68 33 32 33 2d 63  6f 6e 66 2d 69 64 3d 38   =
.-h323-conf-id=3D8
            30 31 36 36 34 33 31 20  43 37 44 38 31 31 20 31   0166431 =
C7D811 1
            43 44 43 38 20 34 33 42  42 38 42 41 36            CDC8 =
43BB8BA6
          }
        }
        [9]=3D {
          type =3D 26 (Vendor-Specific)
          length =3D 34 octets
          vendorId =3D 9
          vendorValue =3D 28 octets {
            1a 1c 68 33 32 33 2d 63  61 6c 6c 2d 6f 72 69 67   =
..h323-call-orig
            69 6e 3d 6f 72 69 67 69  6e 61 74 65               =
in=3Doriginate
          }
        }
        [10]=3D {
          type =3D 26 (Vendor-Specific)
          length =3D 27 octets
          vendorId =3D 9
          vendorValue =3D 21 octets {
            1b 15 68 33 32 33 2d 63  61 6c 6c 2d 74 79 70 65   =
..h323-call-type
            3d 56 6f 49 50                                     =3DVoIP
          }
        }
        [11]=3D {
          type =3D 26 (Vendor-Specific)
          length =3D 29 octets
          vendorId =3D 9
          vendorValue =3D 23 octets {
            21 17 68 33 32 33 2d 67  77 2d 69 64 3d 4e 45 43   =
!.h323-gw-id=3DNEC
            54 49 53 2d 47 57 31                               TIS-GW1
          }
        }
      }
   }

2004/06/27 23:33:34.119 3           radproto.cxx(1905)  RADIUS  Received =
PDU from RADIUS server localhost (127.0.0.1:1812) by socket =
port:62947[0,29-31], PDU: {
      code =3D 3 (Access-Reject)
      id =3D 30
      length =3D 47 octets
      authenticator =3D 16 octets {
        3b 7d 7a 66 3f 02 bc 1a  ea dd d8 40 e4 8b fc 9f   =
;}zf?......@....
      }
      attributes =3D 1 elements {
        [0]=3D {
          type =3D 26 (Vendor-Specific)
          length =3D 27 octets
          vendorId =3D 9
          vendorValue =3D 21 octets {
            67 15 68 33 32 33 2d 72  65 74 75 72 6e 2d 63 6f   =
g.h323-return-co
            64 65 3d 31 31                                     de=3D11
          }
        }
      }
   }

2004/06/27 23:33:34.119 3             gkauth.cxx(1045)  GKAUTH  =
RadAliasAuth Setup check failed
2004/06/27 23:33:34.119 4       ProxyChannel.cxx(1342)  Q931    Dropping =
call #11 due to Setup authentication failure
2004/06/27 23:33:34.119 6             RasTbl.cxx(1830)  GK      Removing =
callptr: 80 16 64 31 00 c7 d8 11 00 01 cd c8 43 bb 8b a6
2004/06/27 23:33:34.119 6           yasocket.cxx(592)   127.0.0.1:37252 =
198 bytes sent
2004/06/27 23:33:34.119 1             RasTbl.cxx(1869)  CDR|11|80 16 64 =
31 00 c7 d8 11 00 01 cd c8 43 bb 8b a6|0|unconnected|Sun, 27 Jun 2004 =
23:33:34 +0100|x.x.x.x:1078| =
|69.28.253.162:1720|7122_endp|12174979137:dialedDigits|:h323_ID|NECTIS-GW=
1;

------=_NextPart_000_00FF_01C45CAB.1EFA0000--




--__--__--

Message: 2
Date: Mon, 28 Jun 2004 09:55:02 +0200
From: Rolf Sponsel <Rolf.Sponsel@xxxxxxxxxxx>
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
CC: Michael Gerdov aka -=MaGGuS=- <maggus@xxxxxxx>
Subject: Re:  [ MyHost ( MyPhone-GnuGK ) ] - [ MyWall (
 NAT )] - Internet - [ Voxgratia ( OpenAM ) ]
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx

Michal,

Thank you for your suggestion.

I think I have tried that in the past too.

Anyway, I tried it again, after adding
the 'Home=<MyPublicIPaddress>' directive.

Unfortunately that doesn't seem to help :-(

I found the - relevant(?) - information below in
the GnuGK manual and thus in addition tried to set
'NetworkInterfaces' to my public IP (w/ mask bits).

* # Home=192.168.1.1
* Default: 0.0.0.0
*
* The gatekeeper will listen for requests on this IP number.
* By default, the gatekeeper listens on all interfaces of your host.
* You should leave out this option, unless you want the gatekeeper
* only to bind to a specified IP.
*
* # NetworkInterfaces=192.168.1.1/24,10.0.0.1/0
* Default: N/A
*
* Specify the network interfaces of the gatekeeper. By default the
* gatekeeper will detect the interfaces of your host automatically.
* There are two situations that you may want to use this option.
* One is automatical detection failed, another is the gatekeeper is
* behind an NAT box and allow endpoints with public IPs to register
* with. In this case you should set the option just as the gatekeeper
* is running on the NAT box.

That didn't seem to improve things either though. :-(

Any more ideas/suggestions?


BTW, considering that my NAT/Firewall supports H.323 and seems to work fine with MyPhone when not routing via the GnuGK I assume my firewall does *not* remap port. Isn't that a reasonable assumtion?


Best Regards, Rolf Sponsel


Michal Zygmuntowicz wrote:

> As far as I remember, setting Home to your public IP
> should solve your issue (assuming your firewall/NAT does
> not remap ports). I personally found this working in 2.0,
> but it should also work fine in 2.2, I guess.
>
> On Sun, 2004-06-27 at 17:48, Rolf Sponsel wrote:
>
>>Hello everyone on the opehh323gk-users list! :-)
>>
>>I'm *new to the list* and to GnuGK; and thus
>>have a lot of, probably, "naive" questions ;-)
>>
>>But, *please* bear with me! I'm trying to learn.
>>
>>I spent the whole weekend 4 weeks ago reading
>>and trying to figure out how to make MyPhone
>>work using the GnuGK as a proxy - but I always
>>seemed to fail. :-(
>

--
----
------
--------

Rolf Sponsel

___________________________________________e_n_d___o_f___m_e_s_s_a_g_e_






--__--__--

Message: 3
From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx>
To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: BUG REPORT: GNUGK CRASHES. CVS by June 25th 2004
Date: Mon, 28 Jun 2004 10:34:25 +0200
Organization: Quarcom FHU
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx


1. Can you reproduce the error? And generate a backtrace eventually?
2. If you look at the Setup message you can see that there is almost no
    information about the calling party, so the gatekeeper chooses to send
    an IP address as an Username.

----- Original Message -----
From: "Oleg Ustinov" <O2Ustinov@xxxxxxxxxx>
Sent: Monday, June 28, 2004 12:59 AM


> Hello List.
>
> Found trouble:
>
> CVS by 25 June, 2004.
> After receiving Setup message call is rejected because security does not
> matched (don't know why!), then wrote CDR and then crash. See attached debug
> trace level 6
>
> In previous version of CVS - it was fully OK. After restart GNUGK with
> previous build version - same user and same called number gone thru and
> finished after 10 minutes.
>
> Should I make changes in Config? Or it is really BUG.
>
> Has some body same troubles?
>
> PS. With other customers (CISCO and MERA based), GNUGk shown normal
> username, CLID and no IP address as username, etc.
> With this one (used CTI systems) and think other with NEXTONE, this problem
> come again.
>
> Best regards,
> Oleg




--__--__--

Message: 4
From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx>
To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Different User Names appeared in Access Request and Accounting Request sent to Radius Server
Date: Mon, 28 Jun 2004 10:39:34 +0200
Organization: Quarcom FHU
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx


Have you run make clean before compiling the new version?

----- Original Message -----
From: "Thomas Tam" <development@xxxxxxxxxxxx>
Sent: Monday, June 28, 2004 4:59 AM


> I have downloaded v2.0.9 from cvs successfully. However, when I execute
> gnugk -c /etc/gnugk.ini -ttttt, the debug message tells me that it cannot
> find the configuration file. I have already one gnugk.ini under /etc
> directory and run successfully in the past. Is there something wrong with
> that?
>
> Thomas




--__--__--

Message: 5
From: "Thomas Tam" <development@xxxxxxxxxxxx>
To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Different User Names appeared in Access Request and Accounting Request sent to Radius Server
Date: Mon, 28 Jun 2004 16:43:00 +0800
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx


Hi,

I have downloaded v2.0.9 from cvs successfully. However, when I execute
gnugk -c /etc/gatekeeper.ini -ttt, the debug message reports:
Warning: cannot find config file.

I have already a gatekeeper.ini under /etc directory and run successfully in
the past. Is there something wrong with that?



Thomas > > ----- Original Message ----- > From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> > To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> > Sent: Friday, June 25, 2004 7:00 PM > Subject: Re: Different User Names appeared in Access > Request and Accounting Request sent to Radius Server > > > > You need to use -rv2_0 cvs option when checking out the sources > > in order to get 2.0 version. > > > > 2.2.5 does not yet have the bug fixed. > > > > ----- Original Message ----- > > From: "Thomas Tam" <development@xxxxxxxxxxxx> > > Sent: Friday, June 25, 2004 12:45 PM > > > > > > > The version is 2.2beta5. > > > > > > Has the big been fixed in this version? > > > > > > Thomas > > > > > > > > ------------------------------------------------------- > > This SF.Net email sponsored by Black Hat Briefings & Training. > > Attend Black Hat Briefings & Training, Las Vegas July 24-29 - > > digital self defense, top technical experts, no vendor pitches, > > unmatched networking opportunities. Visit www.blackhat.com > > > > _______________________________________________________ > > > > List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > > Homepage: http://www.gnugk.org/ > > > > > > > > ------------------------------------------------------- > This SF.Net email sponsored by Black Hat Briefings & Training. > Attend Black Hat Briefings & Training, Las Vegas July 24-29 - > digital self defense, top technical experts, no vendor pitches, > unmatched networking opportunities. Visit www.blackhat.com > > _______________________________________________________ > > List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Homepage: http://www.gnugk.org/ > >



--__--__--

Message: 6
From: "Thomas Tam" <development@xxxxxxxxxxxx>
To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Different User Names appeared in Access Request and Accounting Request sent to Radius Server
Date: Mon, 28 Jun 2004 16:52:54 +0800
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx


hi Michal,

Yes. I have run make clean before compilation.

Thomas


----- Original Message ----- From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Monday, June 28, 2004 4:39 PM Subject: Re: Different User Names appeared in Access Request and Accounting Request sent to Radius Server


> Have you run make clean before compiling the new version?
>
> ----- Original Message -----
> From: "Thomas Tam" <development@xxxxxxxxxxxx>
> Sent: Monday, June 28, 2004 4:59 AM
>
>
> > I have downloaded v2.0.9 from cvs successfully. However, when I execute
> > gnugk -c /etc/gnugk.ini -ttttt, the debug message tells me that it
cannot
> > find the configuration file. I have already one gnugk.ini under /etc
> > directory and run successfully in the past. Is there something wrong
with
> > that?
> >
> > Thomas
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by Black Hat Briefings & Training.
> Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> digital self defense, top technical experts, no vendor pitches,
> unmatched networking opportunities. Visit www.blackhat.com
>
> _______________________________________________________
>
> List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> Homepage: http://www.gnugk.org/
>
>




--__--__--

Message: 7
Date: Mon, 28 Jun 2004 14:58:06 +0200
From: Rolf Sponsel <Rolf.Sponsel@xxxxxxxxxxx>
To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
CC: Michael Gerdov aka -=MaGGuS=- <maggus@xxxxxxx>,
        Michal Zygmuntowicz <m.zygmuntowicz@xxxxxxx>
Subject: Re:  [ MyHost ( MyPhone-GnuGK ) ] - [ MyWall (
 NAT )] - Internet - [ Voxgratia ( OpenAM ) ]
Reply-To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx

Hi again,

Michal Zygmuntowicz wrote:

> As far as I remember, setting Home to your public IP
> should solve your issue (assuming your firewall/NAT does
> not remap ports). I personally found this working in 2.0,
> but it should also work fine in 2.2, I guess.

In order to avoid problems with the new 2.2beta4 release
I decided to try the stable 2.0.8 release instead.

Now, when I specify the 'Home=<my.public.ip.address>'
directive in the configuration file GnuGK fails to
even start properly, and I have to kill it.


This is the output I receive when starting GnuGK: ___________________________________________________________ D:\Program Files\GNUGK\openh323gk-2.0.8\bin>gnugk -tt 2004/06/28 13:41:17.170 2 Toolkit.cxx(90) Network=127.0.0.0/255.0.0.0, IP=127.0.0.1 2004/06/28 13:41:17.180 2 Toolkit.cxx(90) Network=192.168.0.0/255.255.255.0, IP=192.168.0.x 2004/06/28 13:41:17.190 2 Toolkit.cxx(90) Network=192.168.0.x/255.255.255.255, IP=127.0.0.1 2004/06/28 13:41:17.200 2 Toolkit.cxx(90) Network=192.168.0.255/255.255.255.255, IP=192.168.0.x 2004/06/28 13:41:17.210 2 Toolkit.cxx(90) Network=224.0.0.0/224.0.0.0, IP=192.168.0.x 2004/06/28 13:41:17.220 2 Toolkit.cxx(90) Network=255.255.255.255/255.255.255.255, IP=192.168.0.x 2004/06/28 13:41:17.240 2 Toolkit.cxx(91) Default IP=192.168.0.x 2004/06/28 13:41:17.250 2 Toolkit.cxx(158) GK H.323 Proxy enabled 2004/06/28 13:41:17.260 2 gkacct.cxx(924) GKACCT Successfully logged event 8 OpenH323 Gatekeeper - The GNU Gatekeeper with ID 'OpenH323GK' started on MY.PUBLIC.IP.ADDRESS Gatekeeper(GNU) Version(2.0.8) Ext(pthreads=0,acct=1,radius=1,mysql=1,pgsql=0,ldap=0,large_fdset=0) Build(Jun 1 2004, 10:14:28) Sys(NT i586 v4.0.1381)

2004/06/28 13:41:17.280 1                 gk.cxx(542)   OpenH323
Gatekeeper - The GNU Gatekeeper with ID 'OpenH323GK' started on
  MY.PUBLIC.IP.ADDRESS
Gatekeeper(GNU) Version(2.0.8)
Ext(pthreads=0,acct=1,radius=1,mysql=1,pgsql=0,ldap=0,large_fdset=0)
Build(Jun  1 2004, 10:14:28)
  Sys(NT i586 v4.0.1381)

This program is free software. You can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation, either version 2
of the License, or (at your option) any later version.

Disable Bandwidth Management

Enter <Ctrl>+<C> or <Ctrl>+<Break> to exit
2004/06/28 13:41:17.491 2                 gk.cxx(589)   GK
TimeToLive for Registrations: 300
2004/06/28 13:41:17.511 2         WaitingARQ.cxx(60)    GK      Virtual
Queue disabled for aliases
2004/06/28 13:41:17.531 2         WaitingARQ.cxx(70)    GK      Virtual
Queue disabled for prefixes
2004/06/28 13:41:17.541 2         WaitingARQ.cxx(80)    GK      Virtual
Queue disabled for regular expression
2004/06/28 13:41:17.551 2       ProxyChannel.cxx(74)    Q931PortRange:
30000-39999
2004/06/28 13:41:17.561 2       ProxyChannel.cxx(74)    H245PortRange:
40000-49999
2004/06/28 13:41:17.581 2       ProxyChannel.cxx(74)    T120PortRange:
50000-59999
2004/06/28 13:41:17.591 2       ProxyChannel.cxx(74)    RTPPortRange:
50000-59999
2004/06/28 13:41:17.601 1        ProxyThread.cxx(495)   ProxyL  Can't
listen port 1721
2004/06/28 13:41:17.611 2             RasSrv.cxx(602)   GK      Using
Routed Signalling
2004/06/28 13:41:17.621 2             RasSrv.cxx(603)   GK      H.245
Routed Enabled
2004/06/28 13:41:17.641 2             thread.cxx(31)
ProxyHandleThread 339 started
2004/06/28 13:41:17.671 1             RasSrv.cxx(2359)  GK
RasThread 435 started
2004/06/28 13:41:17.681 2             RasSrv.cxx(2362)  GK      Entering
connection handling loop
2004/06/28 13:41:17.691 1             RasSrv.cxx(2366)  GK      Bind to
RAS port failed!
2004/06/28 13:41:17.711 1             RasSrv.cxx(2422)  GK
RasThread terminated!
2004/06/28 13:41:17.761 2             thread.cxx(31)
ProxyHandleThread 383 started
2004/06/28 13:41:17.771 1       MulticastGRQ.cxx(57)    GK
Multicast listener started
2004/06/28 13:41:17.781 1       MulticastGRQ.cxx(70)    GK      Can't
join multicast group.

Shut down in progress...
2004/06/28 13:41:18.652 2             RasSrv.cxx(759)   GK      Closing
RasThread
___________________________________________________________



Now that I've investigated some more in this...

My thoughts are:

1). If MyPhone can establish a working connection
     with OpenAM at VoxGratia via my Firewall(NAT)
     (which is specified to have H323 support),
     then it should be able to work with GnuGK too - right?

2). In order to make sure that MyPhone does not
     talk with OpenAM at VoxGratia directly I've
     explicitly configured it to only communicate
     via 127.0.0.1 (i.e. the localhost interface,
     *NOT* via the local machines LAN interface).
     I have also specified to look for the GnuGK
     on the localhost interface and made MyPhone
     require a GK. (Monitored with TCPView)

3). In order to verify that GnuGK can proxy a
     call to a locally running openam-1.1.17,
     I've started one like this:

     openam -g 192.168.0.x -i 192.168.0.x -u localam -m openam.wav

	*** Note! openam is *NOT* connected to the 127.0.0.1 IF,
	thus MyPhone and openam should not be able to communicate
         directly via the 127.0.0.1 interface.

4). Calling "localam" works fine with this setup.
     Snooping with ethereal reveals no connections
     to external addresses. (Also monitored with TCPView).

5). Using the same setup, calling "openam@xxxxxxxxxxxxx",
     seems to connect but I cannot hear the recorded message.

     This is the output of MyPhone:

	MyPhone is ready...
	Searching for Gatekeeper.... Please Wait!
	Successfully registered with Gatekeeper: OpenH323GK@localhost
	Started receiving GSM-06.10{sw} data  (4 frames).
	Started sending GSM-06.10{sw} data  (4 frames).
	Talking to openam [127.0.0.1]
	Stopped sending GSM-06.10{sw} data.
	Stopped receiving GSM-06.10{sw} data.
	Connection with openam [127.0.0.1] cleared.

     Snooping with ethereal reveals that a lot of ICMP messages
     are sent from the local machine's LAN IF to the inteface of
     voxgratia.org, claiming "Destination unreachable".

6). Together, he above raises the question what else parameter
     do I have to specify in the configuration file of GnuGK?
     The 'Home' parameter obviously doesn't seem to work.

     Considering that I had to specify my LAN's public IP to
     MyPhone in order to make it work, I assume I have to
     specify it to GnuGK too. But how?

     This is my GnuGK config file:
	____________________________________________________
	##
	## A very simple proxy configuration file.
	##

	[Gatekeeper::Main]
	Fourtytwo=42
	Name=OpenH323GK
	;;Home=MY.PUBLIC.IP.ADDRESS	# -> Can't join multicast group.
	TimeToLive=300

	[GkStatus::Auth]
	rule=allow

	[RoutedMode]
	GKRouted=1
	H245Routed=1
	CallSignalPort=1721
	CallSignalHandlerNumber=1
	AcceptNeighborsCalls=0
	AcceptUnregisteredCalls=0
	RemoveH245AddressOnTunneling=1
	DropCallsByReleaseComplete=1
	SendReleaseCompleteOnDRQ=1
	SupportNATedEndpoints=1
	Q931PortRange=30000-39999
	H245PortRange=40000-49999

	[Proxy]
	Enable=1
	ProxyForSameNAT=1
	T120PortRange=50000-59999
	RTPPortRange=50000-59999

	# EOF
	____________________________________________________


Any more input to this is most welcome and higly appreciated!

Kind Regards,
Rolf Sponsel

--
----
------
--------

Rolf Sponsel

___________________________________________e_n_d___o_f___m_e_s_s_a_g_e_



--__--__--

_______________________________________________
Openh323gk-users mailing list
Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openh323gk-users


End of Openh323gk-users Digest


"La grandeur d'une civilisation ne se mesure pas par sa capacité à gagner des guerres mais plutot par sa capacité à les éviter !"

_________________________________________________________________
MSN Messenger : discutez en direct avec vos amis ! http://www.msn.fr/msger/default.asp




-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com


_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux