Stewart, I'm not really seeing any useful error information, regardless of logging level - I see "IRR Received", then 9 seconds later, it times out with a "DRQ Received" message. And I'm still seeing no traffic attempt to go outbound at all from the gatekeeper (via tcpdump) - it doesn't seem to be even attempting the connection. Right now, I'm simply trying to connect two instance of MyPhone - one inside the network, and one outside the network. There is just one GK, which is inside the network, protected by firewalling. The outside device is currently unable to register with the GK, due to firewall rules. Is it possible to make calls to the outside endpoint, without having it registered to the GK? I'd like to avoid that stipulation, if possible. I configured the outside MyPhone to not use a GK. MyPhone (NAT) -> GK -> firewall -> MyPhone (NAT) I added this information to the config: [RoutedMode] AcceptUnregisteredCalls=1 [RoutingPolicy] Default=explicit,dns [RasSrv::PermanentEndpoints] xxx.xxx.xxx.xxx=TEST_CLIENT (outside IP configured here) [RasSrv::ARQFeatures] CallUnregisteredEndpoints=1 [Gatekeeper::Main] NetworkInterfaces=[interfaces] I try to connect via IP or "TEST_CLIENT", but neither works. I'm not entirely sure how to allow calls by IP - I'm hoping I configured that properly in the RoutingPolicy section. I have not tried 2.0.9, but the external IP is configured as a loopback on the host, so I'm not sure if the NetworkInterfaces element is really needed. Any other ideas? Thanks. Jason -----Original Message----- From: openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx [mailto:openh323gk-users-admin@xxxxxxxxxxxxxxxxxxxxx] On Behalf Of Stewart Nelson Sent: Friday, October 28, 2005 5:23 PM To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Some basic setup questions Hi Jason, What error are you getting? (If you don't see one, try a higher trace level.) If you are getting an ARJ "called party not registered", and dialing by number (or H.323 ID), you need to define the external endpoints in [RasSrv::PermanentEndpoints] . Otherwise, the GK won't know where to send the call. If you are dialing by IP address (not recommended), that is not enabled by default, see [RoutingPolicy] . For GK behind NAT, you need to set up e.g. NetworkInterfaces=192.168.1.123/24,1.2.3.4/0 when the GK IP address is 192.168.1.123, and the public IP on the WAN side of the firewall is 1.2.3.4 . The above does not always work correctly in 2.2.x; try version 2.0.9 if that meets your requirements and you're still having trouble. In some cases you will need to set up some port forwarding on your NAT box. Note that if the endpoint you are calling is trying to register with your GK, but can't, it probably won't accept the call. If it is registered with another GK, your call will be diverted to that GK, and you will have to meet its authentication requirements. In some cases, your GK will have to register as a "child" to the other GK. Good luck, Stewart ----- Original Message ----- From: <Jason.Price@xxxxxxxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Friday, October 28, 2005 8:28 PM Subject: Some basic setup questions I am brand new to gnugk and related technologies, and am attempting to setup an h.323 proxy in our environment. Unfortunately, I am having some troubles, and was hoping some here could help me out. Basically, I need to allow an h.323 device inside our network to establish a connection to an h.323 device outside of our network. A firewall sits in between the devices, and the gnugk server is behind the firewall. I have turned on the routing functionality and the proxy functionality, but I am not able to complete a call to an outside device. The inside device (using MyPhone for testing) successfully registers with gnugk, and the external device does not (due to the firewall). When I attempt to make a call to the outside device, I can see the traffic coming into gnugk, but no traffic ever leaves it - tcpdump shows no attempt to ever make a connection to the external device. My config file (I have blanked out some information for security purposes): [Gatekeeper::Main] Fourtytwo=42 EndpointSignalPort=1720 [RoutedMode] GKRouted=1 H245Routed=0 CallSignalPort=1721 CallSignalHandlerNumber=2 RemoveH245AddressOnTunneling=1 DropCallsByReleaseComplete=1 SupportNATedEndpoints=1 Q931PortRange= H245PortRange= [Proxy] Enable=1 InternalNetwork= T120PortRange= RTPPortRange= [GkStatus::Auth] rule=allow Can anyone help me set this up? Thanks. ------------------------------------------------------- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today * Register for a JBoss Training Course Free Certification Exam for All Training Attendees Through End of 2005 Visit http://www.jboss.com/services/certification for more information _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/ ------------------------------------------------------- This SF.Net email is sponsored by the JBoss Inc. Get Certified Today * Register for a JBoss Training Course Free Certification Exam for All Training Attendees Through End of 2005 Visit http://www.jboss.com/services/certification for more information _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id?49 Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/