H323 conntrack not working

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I have gnugk on my linux 2.4.20 firewall running iptables 1.2.7a with
conntrack_h323 installed.

>From within the LAN, netmeeting can register with gnugk and make calls to
other registered endpoints (on LAN or Internet).
>From the Intenet, netmeeting can register with gnugk but cannot make a call
to endpoints in the LAN.

I have been using ethereal to try and see what is happening. 
In both cases H.225 packets are exchanged between gnugk port 1719 <->
netmeeting port x and all looks fine.

It seems that during call setup, the Internet netmeeting attempts to open a
TCP connection to port 3000x on gnugk (the firewall) but contrack_h323
doesn't allow it.

Anyone have any ideas whats wrong? or suggestions on how to debug my
problem?

One curious thing is that lsmod shows ip_net_h323 unused. Is this ok?
ip_nat_h323             3392   0  (unused)
ip_conntrack_h323       3136   1
ipt_MASQUERADE          2080   1
ipt_LOG                 4192   3
iptable_nat            19988   2  [ip_nat_h323 ipt_MASQUERADE]
ip_tables              13216   8  [ipt_limit ipt_state iptable_filter
ipt_MASQUERADE ipt_LOG iptable_nat]

Regards,
Richard


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux