Hi, in theory, you can use port forwarding on a number of port ranges to send incoming calls from the firewall to GnuGk, but thats a very trick configuration and I wouldn't recommend using that. Putting a server in front of the firewall is how most commercial products do it (if you ignore those that install full firewall bypasses, eg. Polycom VBPs). In my view thats the most secure option, because your firewall remains closed. Regards, Jan Oliver Weinmann wrote: > Hi Jan, > > This is a problem for us. We are not allowed to put any machines in front of the firewall, neither can we request to open any additional ports on the firewall. It's a bit of a let's say political problem. :( We assumed something like this would be possible: > > ((( INTERNET ))) > | > | NAT: External IP for GnuGK > ----------- > | |-------------------------------| > | | Port 1719 UDP ------------- > | FW | Internal Network |Polycom| > ----------- |QDX | > | ------------- > | > | DMZ > |------------------| > ------------ ------------- > | | |Polycom| > |GnuGK | |HDX | > ------------ ------------- > > Sorry for the very simple drawing, but this is how we assumed we could get it working without any further changes to firewall or our infrastructure. If there is no change required on the firewall we could probably put it in front of the firewall, but it would be better if not. > > Thanks for your help. > > -----Original Message----- > From: Jan Willamowius [mailto:jan@xxxxxxxxxxxxxx] > Sent: Donnerstag, 8. Mai 2014 09:49 > To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Subject: Re: Polycom QDX 6000 and HDX 7000 / GnuGK as Proxy??? > > Hi Oliver, > > you should place a GnuGk in front of your firewall and register your Polycoms with it. Your Polycoms support H.460 NAT traversal so you don't have to open any ports in the firewall. > > Then you can call them from the outside as user@public-ip or public-ip##user. > > Regards, > Jan > > -- > Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan@xxxxxxxxxxxxxx > Website: http://www.gnugk.org > Support: http://www.willamowius.com/gnugk-support.html > > Relaxed Communications GmbH > Frahmredder 91 > 22393 Hamburg > Geschäftsführer: Jan Willamowius > HRB 125261 (Amtsgericht Hamburg) > USt-IdNr: DE286003584 > > > Oliver Weinmann wrote: > > Hi, > > > > we have two Polycom systems (QDX 6000 and HDX 7000). We would like to use GnuGK as a proxy for both systems as they are behind a firewall that we can't administer. Is this possible and how does it work? Currently we can receive calls via ISDN and IP on one of the systems. We would like to use this systems IP, as it has a NAT on the firewall and all the required ports for videoconferencing are already opened, for the GnuGK machine. But we wonder how we can receive calls via IP on both Polycoms if there is only one NATed IP address. Is there some sort of Name-based routing like in Apache virtual hosts? And maybe there is an example configuration? Currently we can register one of the Polycoms just fine with GnuGK but we can't call any outside IPs. I have not yet been able to test an internal IP call as the other Polycom system was not available at that time. > > > > Best Regards, > > Oliver Weinmann -- Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/ ------------------------------------------------------------------------------ Is your legacy SCM system holding you back? Join Perforce May 7 to find out: • 3 signs your SCM is hindering your productivity • Requirements for releasing software faster • Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
