H323..... and getting close! anyone tell me whats going wrong!

H323..... and getting close! anyone tell me whats going wrong!

[Shazad Malik]

Hello -

I have the following settings:
iptables 1.2.6a
linux kerbel 2.4.18
pwlib (latest)
and openh323 (latest)

This is the error messages I'm getting, which I have seen from other sites
but not sure how to tackle the problem:

=======================================================================
Testing... 0-newnat13.patch NOT APPLIED (98 rejects out of 100 hunks)
The newnat/0-newnat13 patch:
   Author: Harald Welte <laforge@gnumonks.org>,
   Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
   Status: Pending for kernel inclusion

   Implementation of the new nat API for kernel 2.4.18 and above.

   - enables us to have multiple related expectations
   (necessarry for H.323, real IRC and PPTP tracking, ...)
   - allows expectations to have timeouts
   - adds full SACK support to the NAT code (we no longer strip
   SACKPERM option out of all SYN patckes for ftp/irc connections)

-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y
Testing patch newnat/0-newnat13.patch...
Failed to patch copy of /usr/src/linux
TEST FAILED: patch NOT applied.

Aonther ERRROR:

 1731         Audio call control (TCP)
   Dynamic              H.245 call control (TCP)
   Dynamic              RTCP/RTP streaming (UDP)

   The H.323 conntrack/NAT modules support the connection tracking/NATing of
   the data streams requested on the dynamic ports. The helpers use the
   search/replace hack from the ip_masq_h323.c module for the 2.2 kernel
   series.

   At the very minimum, H.323/netmeeting (video/audio) is functional by
letting
   trough the 1720 port and loading these H.323 module(s).

   The H.323 conntrack/NAT modules do not support

   - H.245 tunnelling
   - H.225 RAS (gatekeepers)
-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y
Testing patch newnat/h323-conntrack-nat.patch...
   Placed new Config.in line
   Placed new Config.in line
   Placed new Configure.help entry
   Placed new Makefile line
Could not find place to slot in ip_conntrack.h entry
Could not find place to slot in ip_conntrack.h entry
Could not find place to slot in ip_conntrack.h entry

===================================================================

This is what I have done:
1) I have grabbed the latest newnat from the CVS directory which is
newnat13 from the samba.netfiler web site.

2) With iptables under patch-o-matic/newnat, there is newnat8, h323, and
talk files residing.  I bundled the h323, talk, and the latest newnat13 as
tgz files in the patch-o-matric box.

3) I grabbed the convert and convert-patch-o-matic
http://www.kfki.hu/~kadlec/sw/netfilter/newnat-suite webs site.  I modified
the convert script to see all the new tgz file thats I created which  are:
h323.tgz talk.tgz and newnat13.tgz

4) Then I run ./runme; ./runme suite and then I jump onto ./runme newnat
and thats when I get the error.

Is this the right? or something major missing......?? Help would be
appreciated!

-- 
Shazad Malik
work: (845)623-2161
fax: (845) 623-1154

Re: H323..... and getting close! anyone tell me whats going wrong!

[Jozsef Kadlecsik]

On Tue, 4 Jun 2002, Shazad Malik wrote:

> I have the following settings:
> iptables 1.2.6a
> linux kerbel 2.4.18
> pwlib (latest)
> and openh323 (latest)

pwlib and openh323 are not required for the h323 helper of netfilter.

> This is what I have done:
> 1) I have grabbed the latest newnat from the CVS directory which is
> newnat13 from the samba.netfiler web site.

Stop here. All next steps you wrote were unnecessary and could only broke
the patches. If you grab the cvs, you can forget about patch-o-matic from
iptables, because the cvs contains the up to date version. Do not use the
patches from my webpage - it is written there that "this page is kept for
historical reasons only and not maintained anymore."

> 4) Then I run ./runme; ./runme suite and then I jump onto ./runme newnat
> and thats when I get the error.

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

Re: H323..... and getting close! anyone tell me whats going wrong!

[Robert La Ferla]

I have a question for Jozsef.  Could you tell us the procedure to 
install newnat + h323 from a cvs installation?  You can assume that the 
source code has already been checked out.  This may solve my problem 
too.  I think I ran the runme script when installing it on my system.

Thanks,
Robert

Re: H323..... and getting close! anyone tell me whats going wrong!

[Jozsef Kadlecsik]

On Wed, 5 Jun 2002, Robert La Ferla wrote:

> I have a question for Jozsef.  Could you tell us the procedure to
> install newnat + h323 from a cvs installation?  You can assume that the
> source code has already been checked out.  This may solve my problem
> too.  I think I ran the runme script when installing it on my system.

Run './runme extra' and try to apply all pending pacthes (if some pending
patches fail, don't bother). Then apply the h323 patch.

That's all.

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

Re: H323..... and getting close! anyone tell me whats going wrong!

[Alexey Talikov]

for 0-newnat13 you should apply this patch necessarily:
arptables
config-cleanup
conntrack+nat-helper-unregister (not needed kernel>=2.4.18) even if your kernel 2.4.18
ip_conntrack_protocol_destroy
ip_conntrack_protocol_unregister
macro-trailing-semicolon-fix
nat-export_symbols
netfilter-arp
REJECT-dont_fragment

for iptables-1.2.7-20020527
if you use pptp-conntrack-nat and h323-conntrack-nat
apply pptp-conntrack-nat before h323-conntrack-nat i.e. omit 
h323-conntrack-nat apply pptp-conntrack-nat then use b key go back 
and apply h323-conntrack-nat otherwise you can't apply 
patch pptp-conntrack-nat 


05.06.2002 4:55:53, "Shazad Malik" <smalik@vistawiz.com> wrote:

>Hello -
>
>I have the following settings:
>iptables 1.2.6a
>linux kerbel 2.4.18
>pwlib (latest)
>and openh323 (latest)
>
>This is the error messages I'm getting, which I have seen from other sites
>but not sure how to tackle the problem:
>
>=======================================================================
>Testing... 0-newnat13.patch NOT APPLIED (98 rejects out of 100 hunks)
>The newnat/0-newnat13 patch:
>   Author: Harald Welte <laforge@gnumonks.org>,
>   Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
>   Status: Pending for kernel inclusion
>
>   Implementation of the new nat API for kernel 2.4.18 and above.
>
>   - enables us to have multiple related expectations
>   (necessarry for H.323, real IRC and PPTP tracking, ...)
>   - allows expectations to have timeouts
>   - adds full SACK support to the NAT code (we no longer strip
>   SACKPERM option out of all SYN patckes for ftp/irc connections)
>
>-----------------------------------------------------------------
>Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y
>Testing patch newnat/0-newnat13.patch...
>Failed to patch copy of /usr/src/linux
>TEST FAILED: patch NOT applied.
>
>Aonther ERRROR:
>
> 1731         Audio call control (TCP)
>   Dynamic              H.245 call control (TCP)
>   Dynamic              RTCP/RTP streaming (UDP)
>
>   The H.323 conntrack/NAT modules support the connection tracking/NATing of
>   the data streams requested on the dynamic ports. The helpers use the
>   search/replace hack from the ip_masq_h323.c module for the 2.2 kernel
>   series.
>
>   At the very minimum, H.323/netmeeting (video/audio) is functional by
>letting
>   trough the 1720 port and loading these H.323 module(s).
>
>   The H.323 conntrack/NAT modules do not support
>
>   - H.245 tunnelling
>   - H.225 RAS (gatekeepers)
>-----------------------------------------------------------------
>Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y
>Testing patch newnat/h323-conntrack-nat.patch...
>   Placed new Config.in line
>   Placed new Config.in line
>   Placed new Configure.help entry
>   Placed new Makefile line
>Could not find place to slot in ip_conntrack.h entry
>Could not find place to slot in ip_conntrack.h entry
>Could not find place to slot in ip_conntrack.h entry
>
>===================================================================
>
>This is what I have done:
>1) I have grabbed the latest newnat from the CVS directory which is
>newnat13 from the samba.netfiler web site.
>
>2) With iptables under patch-o-matic/newnat, there is newnat8, h323, and
>talk files residing.  I bundled the h323, talk, and the latest newnat13 as
>tgz files in the patch-o-matric box.
>
>3) I grabbed the convert and convert-patch-o-matic
>http://www.kfki.hu/~kadlec/sw/netfilter/newnat-suite webs site.  I modified
>the convert script to see all the new tgz file thats I created which  are:
>h323.tgz talk.tgz and newnat13.tgz
>
>4) Then I run ./runme; ./runme suite and then I jump onto ./runme newnat
>and thats when I get the error.
>
>Is this the right? or something major missing......?? Help would be
>appreciated!
>
>-- 
>Shazad Malik
>work: (845)623-2161
>fax: (845) 623-1154
>
>
>

-----------------------------------
mailto:alexey_talikov@texlab.com.uz
BR
Alexey Talikov
FORTEK
-----------------------------------