From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Tim" Subject: h323 Working :> Date: Thu, 21 Nov 2002 11:58:09 -0800 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001b01c29198$50f31680$0b00a8c0@timboss> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0018_01C29155.4275A890" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0018_01C29155.4275A890 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Fresh copy of 2.4.19 and iptables 1.2.7a with patch-o-matic and used the = z-newnat and h323 that comes with it.. fixed the newnat patch which = couldn't load. add 2 lines to a ip_conntrack.h file and it worked fine=20 Then added these rules $IPTABLES -t nat -A PREROUTING -i $EXTDEV -p tcp --dport 522 -j DNAT = --to 192.168.0.11 # H323 $IPTABLES -t nat -A PREROUTING -i $EXTDEV -p tcp --dport 1503 -j DNAT = --to 192.168.0.11 # H323 $IPTABLES -t nat -A PREROUTING -i $EXTDEV -p tcp --dport 1720 -j DNAT = --to 192.168.0.11 # H323 $IPTABLES -t nat -A PREROUTING -i $EXTDEV -p tcp --dport 1731 -j DNAT = --to 192.168.0.11 # H323 $IPTABLES -t nat -A PREROUTING -i $EXTDEV -p tcp --dport 8080 -j DNAT = --to 192.168.0.11 # H323 insmod ip_conntrack_h323 insmod ip_nat_h323 Regards Tim ------=_NextPart_000_0018_01C29155.4275A890 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Fresh copy of 2.4.19 and iptables 1.2.7a with patch-o-matic and used = the=20 z-newnat and h323 that comes with it.. fixed the newnat patch which = couldn't=20 load. add 2 lines to a ip_conntrack.h file and it worked fine

Then added these rules
$IPTABLES -t nat -A PREROUTING -i $EXTDEV = -p tcp=20 --dport 522 -j DNAT --to 192.168.0.11 # H323
$IPTABLES -t nat -A = PREROUTING=20 -i $EXTDEV -p tcp --dport 1503 -j DNAT --to 192.168.0.11 # = H323
$IPTABLES -t=20 nat -A PREROUTING -i $EXTDEV -p tcp --dport 1720 -j DNAT --to = 192.168.0.11 #=20 H323
$IPTABLES -t nat -A PREROUTING -i $EXTDEV -p tcp --dport 1731 -j = DNAT=20 --to 192.168.0.11 # H323
$IPTABLES -t nat -A PREROUTING -i $EXTDEV -p = tcp=20 --dport 8080 -j DNAT --to 192.168.0.11 # H323

insmod ip_conntrack_h323

insmod ip_nat_h323

Regards Tim

------=_NextPart_000_0018_01C29155.4275A890--