Linux Netfilter discussions
 help / color / mirror / Atom feed
* pom-ng h323-conntrack-nat failure
@ 2005-03-21 13:47 Игорь Осин
  0 siblings, 0 replies; 5+ messages in thread
From: Игорь Осин @ 2005-03-21 13:47 UTC (permalink / raw)
  To: netfilter

kernel 2.6.11
iptables-1.3.1.
patch-o-matic-ng-20050320


# ./runme h323-conntrack-nat
Hey! KERNEL_DIR is not set.
Where is your kernel source directory? [/usr/src/linux]
Hey! IPTABLES_DIR is not set.
Where is your iptables source code directory? [/usr/src/iptables]
Loading patchlet 
definitions............................................................................................. 
done
Welcome to Patch-o-matic ($Revision: 3733 $)!

Kernel:   2.6.11, /usr/src/linux
Iptables: 1.3.1, /usr/src/iptables
Each patch is a new feature: many have minimal impact, some do not.
Almost every one has bugs, so don't apply what you don't need!
-------------------------------------------------------
Already applied:

Testing h323-conntrack-nat... not applied
The h323-conntrack-nat patch:
   Author: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>, Max Kellermann 
<max@duempel.org>
   Status: Alpha


This adds CONFIG_IP_NF_H323: H.323/netmeeting support module for netfilter
connection tracking and NAT. H.323 uses/relies on the following data 
streams:

        Port            Description
        389             Internet Locator Server (TCP)
        522             User Location Server (TCP)
        1503            T.120 Protocol (TCP)
        1720            H.323 (H.225 call setup, TCP)
        1731            Audio call control (TCP)
        Dynamic         H.245 call control (TCP)
        Dynamic         RTCP/RTP streaming (UDP)

The H.323 conntrack/NAT modules support the connection tracking/NATing of
the data streams requested on the dynamic ports. The helpers use the
search/replace hack from the ip_masq_h323.c module for the 2.2 kernel
series.

At the very minimum, H.323/netmeeting (video/audio) is functional by letting
trough the 1720 port and loading these H.323 module(s).

The H.323 conntrack/NAT modules do not support

- H.245 tunnelling
- H.225 RAS (gatekeepers)
-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?] Y
unable to find ladd slot in src 
/tmp/pom-19236/include/linux/netfilter_ipv4/ip_conntrack.h
-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?]
.... 



^ permalink raw reply	[flat|nested] 5+ messages in thread

* pom-ng h323-conntrack-nat failure
@ 2005-03-22  4:23 Игорь Осин
  2005-03-22  4:37 ` port triggering with iptables Chow Kin Lum
  0 siblings, 1 reply; 5+ messages in thread
From: Игорь Осин @ 2005-03-22  4:23 UTC (permalink / raw)
  To: netfilter

kernel 2.6.11
iptables-1.3.1.
patch-o-matic-ng-20050320


# ./runme h323-conntrack-nat
Hey! KERNEL_DIR is not set.
Where is your kernel source directory? [/usr/src/linux]
Hey! IPTABLES_DIR is not set.
Where is your iptables source code directory? [/usr/src/iptables]
Loading patchlet
definitions.............................................................................................
done
Welcome to Patch-o-matic ($Revision: 3733 $)!

Kernel:   2.6.11, /usr/src/linux
Iptables: 1.3.1, /usr/src/iptables
Each patch is a new feature: many have minimal impact, some do not.
Almost every one has bugs, so don't apply what you don't need!
-------------------------------------------------------
Already applied:

Testing h323-conntrack-nat... not applied
The h323-conntrack-nat patch:
   Author: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>, Max Kellermann
<max@duempel.org>
   Status: Alpha

[...]

-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?] Y
unable to find ladd slot in src
/tmp/pom-19236/include/linux/netfilter_ipv4/ip_conntrack.h
-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?]
...




^ permalink raw reply	[flat|nested] 5+ messages in thread

* port triggering with iptables
  2005-03-22  4:23 pom-ng h323-conntrack-nat failure Игорь Осин
@ 2005-03-22  4:37 ` Chow Kin Lum
  0 siblings, 0 replies; 5+ messages in thread
From: Chow Kin Lum @ 2005-03-22  4:37 UTC (permalink / raw)
  To: netfilter

Hi,

I have searched for a long time on net.
Can't get any useful info regarding how to implement port triggering using
iptables (kernel 2.4.22)
Those available information is all about ip_autofw, portfw etc. instead of
iptables.

Hope can get some input from here.

Thanks.
Regards,
Chow



^ permalink raw reply	[flat|nested] 5+ messages in thread

* RE: pom-ng h323-conntrack-nat failure
@ 2005-03-22 11:39 Justin Piszcz
  2005-03-22 11:48 ` Igor Osin
  0 siblings, 1 reply; 5+ messages in thread
From: Justin Piszcz @ 2005-03-22 11:39 UTC (permalink / raw)
  To: Игорь Осин,
	netfilter

This patch is for 2.4.x kernels only.

-----Original Message-----
From: netfilter-bounces@lists.netfilter.org [mailto:netfilter-bounces@lists.netfilter.org] On Behalf Of ????? ????
Sent: Monday, March 21, 2005 11:23 PM
To: netfilter@lists.netfilter.org
Subject: pom-ng h323-conntrack-nat failure

kernel 2.6.11
iptables-1.3.1.
patch-o-matic-ng-20050320


# ./runme h323-conntrack-nat
Hey! KERNEL_DIR is not set.
Where is your kernel source directory? [/usr/src/linux]
Hey! IPTABLES_DIR is not set.
Where is your iptables source code directory? [/usr/src/iptables]
Loading patchlet
definitions.............................................................................................
done
Welcome to Patch-o-matic ($Revision: 3733 $)!

Kernel:   2.6.11, /usr/src/linux
Iptables: 1.3.1, /usr/src/iptables
Each patch is a new feature: many have minimal impact, some do not.
Almost every one has bugs, so don't apply what you don't need!
-------------------------------------------------------
Already applied:

Testing h323-conntrack-nat... not applied
The h323-conntrack-nat patch:
   Author: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>, Max Kellermann
<max@duempel.org>
   Status: Alpha

[...]

-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?] Y
unable to find ladd slot in src
/tmp/pom-19236/include/linux/netfilter_ipv4/ip_conntrack.h
-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/q/?]
...





^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: pom-ng h323-conntrack-nat failure
  2005-03-22 11:39 pom-ng h323-conntrack-nat failure Justin Piszcz
@ 2005-03-22 11:48 ` Igor Osin
  0 siblings, 0 replies; 5+ messages in thread
From: Igor Osin @ 2005-03-22 11:48 UTC (permalink / raw)
  To: netfilter

$ls -l patch-o-matic-ng-20050320/h323-conntrack-nat
total 20
-rw-r--r--  1 5500 5100  864 Дек 18  2003 help
-rw-r--r--  1 5500 5100  195 Фев 22 00:05 info
drwxr-xr-x  5 5500 5100 4096 Мар 21 02:55 linux
drwxr-xr-x  4 5500 5100 4096 Мар 21 02:55 linux-2.6
drwxr-xr-x  4 5500 5100 4096 Мар 21 02:55 linux-2.6.11

$cat patch-o-matic-ng-20050320/h323-conntrack-nat/info
Title: h323 connection tracking and NAT helper
Author: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>, Max Kellermann 
<max@duempel.org>
Status: Alpha
Repository: extra
Requires: linux-2.6 >= 2.6.11


----- Original Message ----- 
From: "Justin Piszcz" <jpiszcz@servervault.com>
To: "Игорь Осин" <osin@vita-samara.ru>; <netfilter@lists.netfilter.org>
Sent: Tuesday, March 22, 2005 3:39 PM
Subject: RE: pom-ng h323-conntrack-nat failure


This patch is for 2.4.x kernels only.




^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2005-03-22 11:48 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-03-22  4:23 pom-ng h323-conntrack-nat failure Игорь Осин
2005-03-22  4:37 ` port triggering with iptables Chow Kin Lum
  -- strict thread matches above, loose matches on Subject: below --
2005-03-22 11:39 pom-ng h323-conntrack-nat failure Justin Piszcz
2005-03-22 11:48 ` Igor Osin
2005-03-21 13:47 Игорь Осин

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox