Hi ... I suppose to have the same problem you have. In order to understand it I setted up a little network to check the problem. My dummy network is like this internal firewall/NAT Firewall/NAT Firewall/NAT external ----------------- --------------------- --------------------- --------------------- ----------------- |netmeeting | | gnugk | | router | | router | |netmeeting | |192.168.0.1|------|192.168.0.254|------|192.168.1.3 |------|192.168.2.100|------|192.168.3.1| | | |192.168.1.3 | |192.168.2.254| |192.168.3.254| | | ----------------- --------------------- -------------------- -------------------- ----------------- and should be a simulation of a internet connection with the 2 router doing port forward. If I declare NetworkInterfaces=192.168.0.254/24,192.168.1.1/24 then internal netmeeting can call the external netmeeting but the external can't do it. If i declare NetworkInterfaces=192.168.0.254/24,192.168.1.1/24,192.168.2.254/32 then the external netmeeting can call but the internal can't ... I used the trace option (level 4) in order to get some information using the last configuration (I supposed this one is correct if I undestood the manual pages :) ), all I get is that the call is immediatly rejected (netmeeting say that the call was not accepted) and in the trace log I get the following messages: 2005/03/05 17:47:21.912 3 ProxyChannel.cxx(1690) GK Call 6 is NAT type 2 2005/03/05 17:47:21.913 3 ProxyChannel.cxx(609) GK Call 6 proxy enabled 2005/03/05 17:47:21.919 3 ProxyChannel.cxx(2179) Q931 192.168.2.100:1720 DIDN'T ACCEPT THE CALL as you can see in 6 millisecond the call is rejected, in the log of the router (192.168.2.100) nothing is dropped ... so I suppose that nothing arrives. The only difference I saw in the log between the rejected and the accepted call is that the NAT type, it is 1 for the accepted (from external to internal) and it is 2 for the rejected (internal to external), if you need detailed logs let me know and I'll post them. Firewall's logs show no message so I suppose that nothing is blocked by them. On the routers the only port accepted and forwarded are the following: 1718:1720 20000:20999 30000:30999 40000:40999 50000:50999 and this is my gnugk configuration: --------------------------------------------------------------------- [Gatekeeper::Main] Fourtytwo=42 Name=GnugkGK #TotalBandwidth=16777216 NetworkInterfaces=192.168.0.254/24,192.168.1.3/24,192.168.2.254/32 [RoutedMode] GKRouted=1 H245Routed=1 CallSignalPort=1720 CallSignalHandlerNumber=1 AcceptNeighborsCalls=1 AcceptUnregisteredCalls=1 RemoveH245AddressOnTunneling=1 DropCallsByReleaseComplete=1 SupportNATedEndpoints=1 Q931PortRange=20000-29999 H245PortRange=30000-30999 [Proxy] Enable=1 T120PortRange=40000-40999 RTPPortRange=50000-59999 ProxyForNAT=1 ProxyForSameNAT=0 [RasSrv::GWPrefixes] [RasSrv::RRQFeatures] [RasSrv::ARQFeatures] ArjReasonRouteCallToSCN=0 ArjReasonRouteCallToGatekeeper=1 CallUnregisteredEndpoints=1 RemoveTrailingChar=# [RoutingPolicy] default=internal,explicit,dns [RasSrv::RRQAuth] default=confirm [GkStatus::Auth] default=allow [RasSrv::RewriteE164] [RasSrv::LRQFeatures] [RasSrv::PermanentEndpoints] [Gatekeeper::Auth] default=allow [CallTable] AcctUpdateInterval=60 [Gatekeeper::Acct] FileAcct=sufficient;stop default=accept [FileAcct] DetailFile=/var/log/gk/AyersRockCDR.log StandardFormat=1 [NATedEndpoints] [CTI::Agents] VirtualQueueAliases=CC RequestTimeout=10 [LogFile] rotate=Weekly --------------------------------------------------------------------- Thanks in advance for your help! Arturo Sandrigo ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
