Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Bird Chen <bird_chen@hp.com>
To: netfilter@lists.netfilter.org
Subject: strange about netmeeting via iptables?
Date: Wed, 18 Sep 2002 01:37:21 +0800	[thread overview]
Message-ID: <3D876851.FD4EEB10@hp.com> (raw)

Hi,
  I am new to this list. But I have been searching for solution on this
issue over and over. I have a linux running iptables between my intranet
and ISP through ADSL link. And my client which is running win2k try to
netmeeting the internet people. But when the connection was established,
peer can hear what I am saying but I can't hear the peer's voice.
  Here is the output of my iptables -L,

root@srv1:/proc/net# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
DROP       tcp  --  anywhere             anywhere           tcp
flags:FIN,SYN,RS
T,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
DROP       tcp  --  anywhere             anywhere           tcp
flags:FIN,SYN,RS
T,PSH,ACK,URG/NONE
DROP       tcp  --  anywhere             anywhere           tcp
dpt:telnet
ACCEPT     tcp  --  10.1.1.0/24          anywhere           tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere           tcp dpt:ssh
LOG        tcp  --  anywhere             anywhere           tcp dpt:www
LOG leve
l warning prefix `HTTP tried to access.'
LOG        udp  --  anywhere             anywhere           udp dpt:www
LOG leve
l warning prefix `HTTP tried to access.'
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
DROP       tcp  --  anywhere             anywhere           tcp
flags:FIN,SYN,RS
T,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
DROP       tcp  --  anywhere             anywhere           tcp
flags:FIN,SYN,RS
T,PSH,ACK,URG/NONE
DROP       all  -- !10.1.1.0/24          anywhere
DROP       all  --  192.168.0.0/16       anywhere
DROP       all  --  172.16.0.0/12        anywhere
DROP       all  --  10.0.0.0/8           anywhere
LOG        tcp  --  anywhere             anywhere           tcp
spts:netbios-ns:
netbios-ssn LOG level warning prefix `SMB tried to cross.'
LOG        udp  --  anywhere             anywhere           udp
spts:netbios-ns:
netbios-ssn LOG level warning prefix `SMB tried to cross.'
DROP       tcp  --  anywhere             anywhere           tcp
spts:netbios-ns:
netbios-ssn
DROP       udp  --  anywhere             anywhere           udp
spts:netbios-ns:
netbios-ssn
DROP       tcp  --  anywhere             anywhere           tcp spt:635
DROP       udp  --  anywhere             anywhere           udp spt:635
DROP       tcp  --  anywhere             anywhere           tcp spt:2049

DROP       udp  --  anywhere             anywhere           udp spt:2049

DROP       tcp  --  anywhere             anywhere           tcp
spt:sunrpc
DROP       udp  --  anywhere             anywhere           udp
spt:sunrpc
DROP       udp  --  anywhere             anywhere           udp
dpt:syslog
DROP       tcp  --  anywhere             anywhere           tcp
dpt:printer
DROP       tcp  --  anywhere             anywhere           tcp
dpt:shell
DROP       tcp  --  anywhere             anywhere           tcp dpt:exec

ACCEPT     all  --  10.1.1.0/24          anywhere           state NEW
ACCEPT     all  -- !10.1.1.0/24          anywhere           state
RELATED,ESTABL
ISHED

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination


  Any idea? I have compiled the modules for h323 support which I grab
the source from internet. And my patched kernel now is
2.4.19-Newnat16-v2.
  Thanks for help.

Best regards,

--
Bird Chen
Personal Key:0BAD AC36 4C98 9495 3A2E  126A 0925 EA4C 702C CEFC




             reply	other threads:[~2002-09-17 17:37 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-09-17 17:37 Bird Chen [this message]
  -- strict thread matches above, loose matches on Subject: below --
2002-09-17 17:40 strange about netmeeting via iptables? Bird Chen
2002-09-17 21:54 ` Jozsef Kadlecsik

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3D876851.FD4EEB10@hp.com \
    --to=bird_chen@hp.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox