I think that You have
some problems with IPTables... please see there doc’s to find how to config it…
But for sure Your
problems are firewall related. You didn’t have rules to accept incomming
packets directed to the GK. See GNUGK docs and Your configuration file (see the
delivered one for examples) for determine the related ports.
Edson.
From:
openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx
[mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On Behalf Of Reaz
Sent: quinta-feira, 22 de junho de
2006 10:45
To: GNU Gatekeeper Users
Subject: Re:
problem with public IP
Thanks for reply.can u suggest me iptables.
my iptables below
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -i eth0 -j ACCEPT
-A RH-Firewall-1-INPUT -i eth1 -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251
-j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
On 6/22/06, Edson
<4lists@xxxxxxxxx> wrote:
Some investigation directions:
1- codec used and available bandwidth;
2- firewall rules doen't reflect port ranges defined
on configuration file;
3- maybe the firewall issue;
4- no idea…. L
Hope that helps.
Edson
I am
useing gnugk 2.2.3.End user got good performance behind
private IP's ,but they are face problem behind public
IP.problem's are......
1. call quality poor(sometime one side voice)
2. Registration's are not stable,after sometime deregister phone and Gnugk
can't delete old registration which terminal or IP phone are not online)
3. no ring back tone( called party can receive without ring tone)
4.FALSE
ring are going on (when anyone dial from public ip it's continuously
ringing.....)
For ur's
kind information my Gk box is Fedora core-4, and configuration
below...how can i solve that's prob ?plz help me.
Thanks
Reaz
[RoutedMode]
GKRouted=y
H245Routed=y
AcceptUnregisteredCalls=y
SupportNATedEndpoints=y
DropCallsByReleaseComplete=y
RemoveCallOnDRQ=y
ForwardOnFacility=y
SendReleaseCompleteOnDRQ=y
CallSignalHandlerNumber=y
RtpHandlerNumber=8
AcceptNeighborsCalls=y
;RemoveH245AddressOnTunneling=0
ConnectTimeout=180000
ShowForwarderNumber=y
CallSignalPort=1720
Q931PortRange=20000-20999
H245PortRange=30000-30999
[Proxy]
Enable=y
ProxyForNAT=y
RTPPortRange=50000-59999
[RasSrv::RRQFeatures]
OverwriteEPOnSameAddress=1
AcceptEndpointIdentifier=1
AcceptGatewayPrefixes=1
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________________
Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/
|
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________________
Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/
