Re: [GnomeMeeting-list] FInally...

["Joey Lamonthe" <benetage hotmail com>]

> Hi Joey,
>
> well, nice screenshots. the port-FORWARDING looks fine. are you sure
> howsoever the pacakges get ACCEPTed before you try to forward them?
>
> this looks pretty much to me, as if UDP 5000-5003 were dropped before
> the forwarding can actually do the magic ;)

To Damien & all,

I found the problem.  You are right: the port forwarding does'nt work 
properly, I do a sniffing again, here my observations and conclusions:

If I use this rule:

rdr on $ext_if proto udp from any to ($ext_if) port 5000:5003 -> $my_machine 
port 5000:*

As told in man page, here the snippet:
[...]
rdr   The packet is redirected to another destination and possibly a dif-
          ferent port.  rdr rules can optionally specify port ranges 
instead
          of single ports.  rdr ... port 2000:2999 -> ... port 4000 
redirects
          ports 2000 to 2999 (inclusive) to port 4000.  rdr ... port
          2000:2999 -> ... port 4000:* redirects port 2000 to 4000, 2001 to
          4001, ..., 2999 to 4999.
[...]

in tcpdump, I can see traffic from remote user, but OpenBSD forward only one 
port in this range.  Others ports seems to be ignored... they are acceped on 
a external interface, but, after... Well.. are they redirected to /dev/null 
insted on a interface? ;-p Don't know.  They are simply ignored.

After that, I tried theses rules to be sure:
rdr on $ext_if proto udp from any to ($ext_if) port 5000 -> $my_machine port 
5000
rdr on $ext_if proto udp from any to ($ext_if) port 5001 -> $my_machine port 
5001
rdr on $ext_if proto udp from any to ($ext_if) port 5002 -> $my_machine port 
5002
rdr on $ext_if proto udp from any to ($ext_if) port 5003 -> $my_machine port 
5003

it's work great!!  I think it's a bug from OpenBSD, and I will talk to the 
developpers.

FYI: I use OpenBSD stable system, version 3.3.

Thank you very much for you help and for your patience.

J.

_________________________________________________________________
Add photos to your messages with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail