Simon Horne wrote:
Simon;
I haven't tried your fix yet, but I'm not sure it's applicable to me,
you see my H.460 GNUGK is not behind NAT, but the H.460 endpoint is.
Would perhaps leaving the Home and Bind alone, and adding ExternalIP
help? I'll probably give it a shot anyway.
Thanks for your help
Andrew
> Remove
> [Gatekeeper::Main]
> Home=
> Bind=
>
> [Proxy]
> InternalNetworks=
>
> Add
> [Gatekeeper::Main]
> ExternalIP={external IP of NAT box}
>
> This should create an appropriate route table inside GnuGk for your
> configuration.
>
> Simon
>
>
> -----Original Message-----
> From: Andrew Herdman [mailto:andrew@xxxxxxxxx]
> Sent: Saturday, 30 January 2010 5:58 AM
> To: GNU Gatekeeper Users
> Subject: H.460.18 occasionally exposes/tries to
> useEndpoints Internal Address
>
> So, further to my H.460 testing, I saw (via tcpdump) the GNUGK which is the
> H.460 registrar trying to communicate with the H.460 endpoint on it's
> Internal address on the firewall, and not the WAN IP I see under the
> registration.
>
> Most of the time, almost all the traffic goes to the right IP address, but
> the occasional packet of a different channel (It's UDP, H.245?
> RAS?) leaks out and tries to go to the endpoints internal pre-NAT IP
> address.
>
> Then, very occasionally, but I can repeat after several tries, all the media
> from the GNU/GK tries to go to the Internal pre-NAT IP address of the
> endpoint.
>
> I'm not entirely sure what's going on, as the registration information is
> intact with the right outside IP, H.460.18 is indicated in the registration,
> and most calls just work.
>
> I'm using a slightly smarter firewall (ASA5500) than the average home user,
> but all the h323 inspections are turned off, so I don't think thats it.
>
> All the packets are sourced from port 50xxx and are destined to the right
> port on the Endpoint (Tandberg 150MXP), just the wrong IP.
>
> Has anyone else run into this? Did I simply miss something in my
> configuration? (Attached below).
>
> Thanks and Best Regards
> Andrew
>
> [Gatekeeper::Main]
> Fortytwo=42
> Name=GNUGK003
> Home=127.0.0.1,10.10.10.10
> Bind=127.0.0.1,10.10.10.10
> TimeToLive=600
> StatusPort=7000
> StatusTraceLevel=1
> UseBroadcastListener=0
> CompareAliasType=1
> CompareAliasCase=0
> TimestampFormat=MySQL
> TimeToLive=600
>
> [LogFile]
> Rotate=daily
> RotateTime=00:00
>
>
> [RoutedMode]
> GKRouted=1
> H245Routed=1
> CallSignalPort=1720
> CallSignalHandlerNumber=10
> RtpHandlerNumber=4
> AcceptNeighborsCalls=1
> AcceptUnregisteredCalls=1
> RemoveH245AddressOnTunneling=1
> RemoveCallOnDRQ=0
> DropCallsByReleaseComplete=1
> SendReleaseCompleteOnDRQ=1
> SupportNATedEndpoints=1
> SupportCallingNATedEndpoints=0
> TreatUnregisteredNAT=0
> ForwardOnFacility=1
> ShowForwarderNumber=0
> Q931PortRange=20000-20999
> H245PortRange=30000-30999
> SetupTimeout=8000
> SignalTimeout=30000
> AlertingTimeout=60000
> TcpKeepAlive=1
> TranslateFacility=1
> SocketCleanupTimeout=5000
> EnableH46018=1
> H46018NoNat=1
>
>
> [Proxy]
> Enable=1
> ProxyAlways=0
> InternalNetwork=10.0.0.0/8,66.0.0.0/20,127.0.0.0/8,65.0.0.0/24
> T120PortRange=40000-49999
> RTPPortRange=50000-59999
> ProxyForNAT=1
> ProxyForSameNAT=1
> DisableH460Call=0
> DisableRTPQueuing=1
> EnableRTPMute=0
>
> [RasSrv::LRQFeatures]
> NeighborTimeout=2
> SendRetries=2
> ForwardHopCount=2
> AcceptForwardedLRQ=1
> ForwardResponse=1
> ForwardLRQ=depends
> AcceptNonNeighborLRQ=1
> AcceptNonNeighborLCF=1
>
>
> [RasSrv::RRQFeatures]
> OverwriteEPOnSameAddress=1
>
>
> [RoutingPolicy]
> default=explicit,internal,neighbor,srv,dns
>
>
> [RoutingPolicy::OnARQ]
> default=explicit,internal,neighbor,srv,dns
>
> [RoutingPolicy::OnLRQ]
> default=explicit,internal,neighbor,srv,dns
>
>
> [RoutingPolicy::OnSetup]
> default=explicit,vqueue,internal,srv,dns
>
> [GkStatus::Auth]
> rule=allow
>
> [RasSrv::RewriteE164]
>
> [RasSrv::Neighbors]
> GKLAB=Gnugk
>
> [Neighbor::GKLAB]
> Host=66.0.0.211
> Dynamic=0
> SendPrefixes=*
> AcceptPrefixes=1999
> ForwardHopCount=5
> AcceptForwardedLRQ=1
> ForwardResponse=1
> ForwardLRQ=Depends
>
>
> ----------------------------------------------------------------------------
> --
> The Planet: dedicated and managed hosting, cloud storage, colocation Stay
> online with enterprise data centers and the best network in the business
> Choose flexible plans and management services without long-term contracts
> Personal 24x7 support from experience hosting pros just a phone call away.
> http://p.sf.net/sfu/theplanet-com
> _______________________________________________________
>
> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
> Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
> Homepage: http://www.gnugk.org/
>
>
> ------------------------------------------------------------------------------
> The Planet: dedicated and managed hosting, cloud storage, colocation
> Stay online with enterprise data centers and the best network in the business
> Choose flexible plans and management services without long-term contracts
> Personal 24x7 support from experience hosting pros just a phone call away.
> http://p.sf.net/sfu/theplanet-com
> _______________________________________________________
>
> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
> Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
> Homepage: http://www.gnugk.org/
>
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________________
Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/
