From mboxrd@z Thu Jan 1 00:00:00 1970 From: Evan Davies Subject: Re: Voice IP Date: Tue, 28 Oct 2003 08:50:30 +1100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1067291430.13458.1.camel@proto.voiceplus.com.au> References: <3F9D8F7C.7010508@adinet.com.uy> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=_fileserver.voiceplus.com.au-23309-1067291432-0001-2" Return-path: In-Reply-To: <3F9D8F7C.7010508@adinet.com.uy> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Manuel Tato Cc: Netfilter This is a MIME-formatted message. If you see this text it means that your E-mail software does not support MIME-formatted messages. --=_fileserver.voiceplus.com.au-23309-1067291432-0001-2 Content-Type: multipart/alternative; boundary="=-pqzd59okKl3++U2tGUTw" --=-pqzd59okKl3++U2tGUTw Content-Type: text/plain Content-Transfer-Encoding: quoted-printable If you are using H323, there is a module for H323 in the patch-o-matic. As for SIP I cannot help you. On Tue, 2003-10-28 at 08:34, Manuel Tato wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 >=20 >=20 > Hi, i'm configuring a firewall/router with a static ip ADSL and a voice > IP gateway. > The voiceip gw es in configured at 192.168.1.40. > With this script i can make calls, but i cant recive any. >=20 > - --------------------------------------------------- > echo 1 > /proc/sys/net/ipv4/ip_forward >=20 > modprobe ip_conntrack_h323 > modprobe ip_nat_h323 >=20 > iptables -A INPUT -j ACCEPT > iptables -A FORWARD -j ACCEPT > iptables -A OUTPUT -j ACCEPT >=20 > iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE >=20 > iptables -t nat -A PREROUTING -p tcp --dport 1726:1789 -i eth1 -j DNAT > - --to 192.168.1.40:1726:1789 > iptables -A FORWARD -i eth1 -p tcp -d 192.168.1.40 --dport 1726:1789 -j > ACCEPT > iptables -t nat -A PREROUTING -p udp --dport 1726:1789 -i eth1 -j DNAT > - --to 192.168.1.40:1726:1789 > iptables -A FORWARD -i eth1 -p udp -d 192.168.1.40 --dport 1726:1789 -j > ACCEPT > - ----------------------------------------------------- >=20 > Any idea? > i'm blocking ports? > i need any other module?? > thanks in advance > thanks a lot... >=20 >=20 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.2 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org >=20 > iD8DBQE/nY98W/G6GKzQKp4RAndEAJ4pYh04AZuTc/f8MQ8Ae6RB/GpRFgCgkaCg > SwAh5HHLSdd0rj68FzTPdXY=3D > =3DRcOK > -----END PGP SIGNATURE----- >=20 Regards Evan Davies. Network and System Administrator. VoicePlus Data Pty Ltd. 1 / 34 Burton St, Milsons Point. NSW 2061. Tel: +61 2 9955 3429 Fax: +61 2 9955 3465 Mobile: 0414 422 234 Email: evand@voiceplus.com.au The email address used for sending this message is not to be added to any database, list or mailing list without my prior, explicit permission. This e-mail is intended for use of the individual or entity above and may contain information that is confidential and privileged. Note if you are the intended recipient, you are hereby notified that any dissemination, distribution or copying of the e-mail is strictly prohibited. If you have received this e-mail in error, please notify us immediately at evand@voiceplus.com.au and destroy the original message.=20 While this e-mail and any attachments have been scanned for common computer viruses and found to be virus free, we recommend you also perform your own virus checking processes before opening any attachments. --=-pqzd59okKl3++U2tGUTw Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable If you are using H323, there is a module for H323 in the patch-o-matic. As = for SIP I cannot help you.

On Tue, 2003-10-28 at 08:34, Manuel Tato wrote: 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi, i'm configuring a firewall/router with a static ip ADSL and a voice
IP gateway.
The voiceip gw es in configured at 192.168.1.40.
With this script i can make calls, but i cant recive any.

- ---------------------------------------------------
echo 1 > /proc/sys/net/ipv4/ip_forward

modprobe ip_conntrack_h323
modprobe ip_nat_h323

iptables -A INPUT -j ACCEPT
iptables -A FORWARD -j ACCEPT
iptables -A OUTPUT -j ACCEPT

iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

iptables -t nat -A PREROUTING -p tcp --dport 1726:1789 -i eth1 -j DNAT
- --to 192.168.1.40:1726:1789
iptables -A FORWARD -i eth1 -p tcp -d 192.168.1.40 --dport 1726:1789 -j
ACCEPT
iptables -t nat -A PREROUTING -p udp --dport 1726:1789 -i eth1 -j DNAT
- --to 192.168.1.40:1726:1789
iptables -A FORWARD -i eth1 -p udp -d 192.168.1.40 --dport  1726:1789 -j
ACCEPT
- -----------------------------------------------------

Any idea?
i'm blocking ports?
i need any other module??
thanks in advance
thanks a lot...


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/nY98W/G6GKzQKp4RAndEAJ4pYh04AZuTc/f8MQ8Ae6RB/GpRFgCgkaCg
SwAh5HHLSdd0rj68FzTPdXY=3D
=3DRcOK
-----END PGP SIGNATURE-----





Regards

Evan Davies.

Network and System Administrator.



VoicePlus Data Pty Ltd.

1 / 34 Burton St,

Milsons Point. NSW

2061.



Tel: +61 2 9955 3429

Fax: +61 2 9955 3465

Mobile: 0414 422 234

Email: evand@voiceplus.=
com.au





The email address used for sending th=
is message is not to be added to any database, list or mailing list without=
 my prior, explicit permission.



This e-mail is intended for use of the i=
ndividual or entity above and may contain information that is confidential =
and privileged.  Note if you are the intended recipient, you are hereb=
y notified that any dissemination, distribution or copying of the e-mail is=
 strictly prohibited.  If you have received this e-mail in error, plea=
se notify us immediately at evand@voiceplus.com.au and destroy the original message.  While this e-ma=
il and any attachments have been scanned for common computer viruses and fo=
und to be virus free, we recommend you also perform your own virus checking=
 processes before opening any attachments.
--=-pqzd59okKl3++U2tGUTw-- --=_fileserver.voiceplus.com.au-23309-1067291432-0001-2 Content-Type: application/pgp-signature; name="signature.asc" Content-Transfer-Encoding: 7bit Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQA/nZMmBnmg6+tb+toRAoQkAJ4mke76rGayyE3MfI/XwpEKLHtk6wCggWt3 JZd+ggEsu9bUeox+X1004M4= =WIgc -----END PGP SIGNATURE----- --=_fileserver.voiceplus.com.au-23309-1067291432-0001-2--