You need to forward:
TCP 1721 (CallSignalPort)
UDP 1719
H.245 TCP port range (H245PortRange)
RTP UDP port range (RTPPortRange)
T.120 TCP port range (T120PortRange), if you are going to use T.120
The firewall also need to allow outbound traffic from local ports
TCP Q931PortRange
TCP H245PortRange
UDP RTPPortRange
UDP 1719
TCP T120PortRange
----- Original Message -----
From: "Nicholas Wheeler" <dragoncow2@xxxxxxxxx>
Sent: Friday, July 02, 2004 3:17 PM
> Okay, well, it's behind the NAT box, so NetworkInterfaces= line needs
> to be there. The hidden ip address is our external IP, which is -not-
> directly attatched to an interface on the gatekeeper server, but
> instead is natted through. When the line isn't there, I can't connect
> at all. When the line is there, I can connect with a client on the
> non-gnugk network, but I can't connect to "ConferMCU", which is
> OpenMCU. Client side says "ConferMCU is not online."
>
> In the telnet interfaces, '?' gives me:
>
> ?
> AllRegistrations
> RCF|10.42.42.16:1720|ConferMCU:h323_ID|mcu|2087_endp
> RCF|10.100.100.1:1720|moo3:h323_ID|terminal|6351_endp
> RCF|10.42.42.249:1720|moo2:h323_ID|terminal|6352_endp
> Number of Endpoints: 3
>
> ConferMCU is running on the same machine as GnuGK, moo3 is on our
> '10.10.10.x' network. The reason it's saying "10.100.100.1" is
> confusing, but it's yanking that IP from one of my vmware interfaces.
> I can send it a different ip via masquerading, but that seems to be
> useless in making the connection. moo2 is on the 10.42.42.x network,
> which is the same as GnuGK, and connects fine with ConferMCU. This is
> all probably because of the correct ports not being open, right? Is
> there a list of ports I need open that'd make this easy? (I can define
> the range for the dynamic ports, but is there anything else?)
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________________
List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/
