All of lore.kernel.org
 help / color / mirror / Atom feed
* New H.323 conntrack & NAT helper module
@ 2006-02-22  5:56 Jing Min Zhao
  2006-02-22  6:17 ` Patrick McHardy
  0 siblings, 1 reply; 23+ messages in thread
From: Jing Min Zhao @ 2006-02-22  5:56 UTC (permalink / raw)
  To: netfilter-devel

Hi, all,

I've written a new H.323 conntrack & NAT helper module for Netfilter.

I have five years experience in H.323 development and many years in Linux
development, so I know many people out there need Linux firewall to support
H.323 as IP phones are becoming more and more popular. I also know Jozsef
Kadlecsik and Max Kellermann have written such Netfilter modules, but they
don't support RAS, Fast-Start and H.245 tunnelling. However, these features
are essential for most modern H.323 devices. Many carriers even don't
support slow-start at all.

This is a almost full featured H.323 module. Since it is based on H.225
version 4, H.235 version 2 and H.245 version 7, it should support most of
the H.323 products in the market. I've spent a lot of time on this module
and my friends helped me test it a lot too. Now I believe it is ready to go
into kernel tree. I'm wondering if anybody can tell me what I should do to
adding it to Netfilter.

Anybody interested in this can download the patch for kernel 2.6.15 in
http://sourceforge.net/project/showfiles.php?group_id=158936. The document
is at http://nath323.sourceforge.net.

Thanks a lot!

Jing Min Zhao

^ permalink raw reply	[flat|nested] 23+ messages in thread
* RE: New H.323 conntrack & NAT helper module
@ 2006-02-25  4:00 Greg Scott
  2006-02-25  6:00 ` Jing Min Zhao
  0 siblings, 1 reply; 23+ messages in thread
From: Greg Scott @ 2006-02-25  4:00 UTC (permalink / raw)
  To: Jing Min Zhao, netfilter-devel

Holey moley - this is GREAT news!!

A couple questions.  Will this module work with 2.6.16 and upcoming
newer kernels?  And - this is a biggie - the documentation says all I
need to do is SNAT TCP 1720 for outbound calls and DNAT TCP 1720 for
inbound calls.  No more tinkering by hand with zillions of TCP/UDP ports
- no more trying to figure out if Polycom or Tandberg or whatever is on
which end.  Is this really true???  Will this patch really figure out
and track the dynamic ports these devices use by default?  If so, then
HOT DOGGIES!!!!  

Also - will it work with proxy ARP?  Let's say I proxy ARP an H.323
device behind the firewall.  Will this patch still handle connection
tracking, even though there is no NAT?  The idea is, I would put a rule
in the FORWARD table for TCP 1720 and the patch would "know" it's an
H.323 device and also track and forward the appropriate TCP and UDP
ports.  But it would be to a public IP Address proxy ARP'd behind the
firewall instead of a NAT'd device.  

thanks

- Greg Scott


-----Original Message-----
From: netfilter-devel-bounces@lists.netfilter.org
[mailto:netfilter-devel-bounces@lists.netfilter.org] On Behalf Of Jing
Min Zhao
Sent: Tuesday, February 21, 2006 11:57 PM
To: netfilter-devel@lists.netfilter.org
Subject: New H.323 conntrack & NAT helper module


Hi, all,

I've written a new H.323 conntrack & NAT helper module for Netfilter.

I have five years experience in H.323 development and many years in
Linux development, so I know many people out there need Linux firewall
to support H.323 as IP phones are becoming more and more popular. I also
know Jozsef Kadlecsik and Max Kellermann have written such Netfilter
modules, but they don't support RAS, Fast-Start and H.245 tunnelling.
However, these features are essential for most modern H.323 devices.
Many carriers even don't support slow-start at all.

This is a almost full featured H.323 module. Since it is based on H.225
version 4, H.235 version 2 and H.245 version 7, it should support most
of the H.323 products in the market. I've spent a lot of time on this
module and my friends helped me test it a lot too. Now I believe it is
ready to go into kernel tree. I'm wondering if anybody can tell me what
I should do to adding it to Netfilter.

Anybody interested in this can download the patch for kernel 2.6.15 in
http://sourceforge.net/project/showfiles.php?group_id=158936. The
document is at http://nath323.sourceforge.net.

Thanks a lot!

Jing Min Zhao

^ permalink raw reply	[flat|nested] 23+ messages in thread

end of thread, other threads:[~2006-03-22 16:18 UTC | newest]

Thread overview: 23+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-02-22  5:56 New H.323 conntrack & NAT helper module Jing Min Zhao
2006-02-22  6:17 ` Patrick McHardy
  -- strict thread matches above, loose matches on Subject: below --
2006-02-25  4:00 Greg Scott
2006-02-25  6:00 ` Jing Min Zhao
2006-02-25  9:01   ` Patrick McHardy
2006-02-25 17:07     ` Jing Min Zhao
2006-02-25 18:43       ` Patrick McHardy
2006-03-01  2:57         ` Jing Min Zhao
2006-03-04  9:41           ` Patrick McHardy
2006-03-13  2:22             ` Jing Min Zhao
2006-03-13 15:00               ` Patrick McHardy
2006-03-16  2:24                 ` Jing Min Zhao
2006-03-16  8:55                   ` Patrick McHardy
2006-03-17 14:56                     ` Jing Min Zhao
2006-03-18 16:38                     ` Jing Min Zhao
2006-03-18 16:47                       ` Patrick McHardy
2006-03-18 17:13                         ` Jing Min Zhao
2006-03-20 14:22                       ` Patrick McHardy
2006-03-20 15:51                         ` Jing Min Zhao
2006-03-20 19:13                           ` Patrick McHardy
2006-03-22 14:26                             ` Jing Min Zhao
2006-03-22 16:04                               ` Patrick McHardy
2006-03-22 16:18                                 ` Jing Min Zhao

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.