Re: Iptables and Kernel

[Geffrey Velasquez <g_netfilter@netfids.com>]

Norman Zhang escribió:

>>>> I'm running 2.6.3. with iptables 1.2.9 and p-o-m-ng h323 patch -- they
>>>> work for me -- but I'm referring to a home lan ond only one netmeeting
>>>> seesioon from the LAN  -- we haven't tried multiple sessions from 
>>>> inside
>>>> the lan ... either to the same netmeeting sessioon or to different 
>>>> ones.
>>>
>>>
>>> Sorry it is me again. I tried to compile pomng using
>>>
>>> # KERNEL_DIR=/usr/src/linux ./runme pending
>>> # KERNEL_DIR=/usr/src/linux ./runme base
>>> # KERNEL_DIR=/usr/src/linux ./runme extend
>>>
>>> but couldn't find h323-conntrack-nat patch being offered. I did see
>>> owner-socketlookup mention something about H.323. May I ask how do I
>>> applied h323-conntrack-nat patch to iptables and kernel-2.6.5 alone? I
>>> can see the subfolder h323-conntrack-nat under pomng.
>>
>>
>>     Okay -- I'm a twit --- I'd assumed since my loadup script was 
>> completed without errors that things had worked all the way through 
>> ... looking again it seems that the h323 stuff only applies against 
>> 2.4.x kernels -- Joseph K.
>> hasn't ported it -- likely because its slightly hackish .. And Lord 
>> KNOWS why
>> netmeeting is working through my firewall ... other than the fact of 
>> a good old ESTABLISHED RELATED rule ... I do know that it only works 
>> outbound, if someone wants to call into the LAN they have to call on 
>> a specific port and I have that port forwarded to the destination host.
>
>
> I'm now using kernel 2.4.26. Now when I run
>
> # KERNEL_DIR=/usr/src/linux ./runme extra
>
> I do see h323-conntrack-nat patch. When I do a 'make xconfig' for the 
> kernel source, under Networking/Netfilter... I can't find the H.323 
> option. But other options like ECN, ..., etc. are available. Is this 
> correct?
>
> Regards,
> Norman
>
>
>

Hi have the same problem, but with 2.4.25

Regards,
Geffrey