net2phone and yahoo

net2phone and yahoo

[Abdul-Wahid Paterson]

Hi,

Has anyone had any experience for allowing Yahoo voice chat and
net2phone through a firewall. I want to only allow it for certain
users but I can't seem to work out the ports that it is using for the
voice chat. Any one done this before?

Thanks,

Abdul-Wahid

Re: net2phone and yahoo

[Abdul-Wahid Paterson]

Hi, thanks for the reply...


> ## Allow yahoo ports yahoo games:11999
> $iptables -A FORWARD -o ppp0 -p tcp -m multiport --dport
> 5000,5001,5100,5050,11999 -m state --state NEW -j ACCEPT

Is 11999 for games? I don't want to allow games access.
 
> The other UDP
> port does normally not need to be specified. Net2Phone uses anything
> in the range 1 - 30000. However, when Net2Phone is running on a
> machine behind NAT32, the actual port number used must be known.

Didn't quite understand this bit. Why would the second UDP port not
need to be specified as by default I am dropping all UPD.  Unless
there is a connection tracking module that knows about this voice chat
and can work out that it is a RELATED connection.

Also,  the work stations are NAT'd and have private addresses. They
want to be able to make and recv. voice chats. Does that mean I have
to open all UDP ports from 1-30000 for the workstations needing voice
chat?

Abdul-Wahid