RE: [GnomeMeeting-list] Re: quicknet and gnomemeeting questions

[Damien Sandras <dsandras seconix com>]

Hi,

That mail was addressed to Eythan Weg.

Do you have any question?

Le mar 14/10/2003 à 12:35, Rowan Crossley a écrit :
> What ??
> 
> -----Original Message-----
> From: gnomemeeting-list-admin gnome org
> [mailto:gnomemeeting-list-admin gnome org] On Behalf Of Damien Sandras
> Sent: 14 October 2003 10:33
> To: gnomemeeting-list gnome org
> Subject: Re: [GnomeMeeting-list] Re: quicknet and gnomemeeting questions
> 
> Hello,
> 
> Please contact noc quicknet com when you are sure that your firewall is
> correctly configured and that the problem is on your side.
> 
> As I already said in a previous mail, I think that the 1st step is to
> try normal calls with normal users. That is the only way to make sure
> everything works.
> 
> Le mar 14/10/2003 à 04:13, Eythan Weg a écrit :
> > Damien Sandras <dsandras seconix com> writes:
> > 
> > > That rule is only if you control outgoing traffic. I will remove it
> from
> > > the FAQ to not confuse people anymore.
> > >
> > > Le lun 13/10/2003 à 23:44, Damien Sandras a écrit :
> > >> Le lun 13/10/2003 à 19:26, Eythan Weg a écrit :
> > >> 
> > >> > 
> > >> > $IPTABLES -I POSTROUTING 1 -t nat -o $IN_DEV -d  \
> > >> > $IN_HOST  -p udp --dport $TCP_PORT_RANGE -j ACCEPT
> > >> 
> > >> Ouch, thanks for mentionning this !!!
> > >> I will update the FAQ now, I'm surprised we have not more users
> with
> > >> problems.
> > 
> > I have tried some more.  Here are the relevant
> > setting given by iptables.   I flushed all the
> > tables and reset the rules just before I start
> > gnomemeeting.  First the filter table:
> > 
> > -----------------------------
> > Chain INPUT (policy DROP 0 packets, 0 bytes)
> >  pkts bytes target     prot opt in     out     source
> destination         
> >  1330 91067 bad_tcp_packets  tcp  --  any    any     anywhere
> anywhere           
> >     1    60 tcp_packets  tcp  --  eth0   any     anywhere
> anywhere           
> >    22  7667 udp_packets  udp  --  eth0   any     anywhere
> anywhere           
> >     0     0 DROP       all  --  eth0   any     anywhere
> BASE-ADDRESS.MCAST.NET/8
> > 
> > Chain FORWARD (policy DROP 0 packets, 0 bytes)
> >  pkts bytes target     prot opt in     out     source    destination
> 
> >    16  3707 ACCEPT     udp  --  eth0   any     anywhere  192.168.0.2
> udp dpts:5010:5013 
> >     0     0 ACCEPT     tcp  --  eth0   any     anywhere  192.168.0.2
> tcp dpt:1720 
> >   486 33628 ACCEPT     udp  --  eth0   any     anywhere  192.168.0.2
> udp dpts:5000:5003 
> >    19  1827 ACCEPT     tcp  --  eth0   any     anywhere  192.168.0.2
> tcp dpts:30000:30010 
> > 
> > Chain allowed (3 references)
> >  pkts bytes target     prot opt in     out     source    destination
> 
> >     1    60 ACCEPT     tcp  --  any    any     anywhere  anywhere
> tcp flags:SYN,RST,ACK/SYN 
> >     0     0 ACCEPT     tcp  --  any    any     anywhere  anywhere
> state RELATED,ESTABLISHED 
> >     0     0 DROP       tcp  --  any    any     anywhere  anywhere
> 
> > 
> > 
> > Chain tcp_packets (1 references)
> >  pkts bytes target     prot opt in     out     source    destination
> 
> >     1    60 allowed    tcp  --  any    any     anywhere  anywhere
> tcp dpt:smtp 
> >     0     0 allowed    tcp  --  any    any     anywhere  anywhere
> tcp dpts:30000:30010 
> >     0     0 allowed    tcp  --  any    any     anywhere  anywhere
> tcp dpt:1720 
> > 
> > Chain udp_packets (1 references)
> >  pkts bytes target     prot opt in     out     source    destination
> 
> >     0     0 ACCEPT     udp  --  any    any     anywhere  anywhere
> udp dpts:5000:5003 
> >     0     0 ACCEPT     udp  --  any    any     anywhere  anywhere
> udp dpts:5010:5013 
> >    22  7667 DROP       udp  --  eth0   any     anywhere
> 255.255.255.255    udp dpts:bootps:bootpc 
> > 
> > 
> > And here is the relevant nat table.
> > 
> > Chain PREROUTING (policy ACCEPT 52 packets, 9034 bytes)
> >  pkts bytes target     prot opt in     out     source    destination
> 
> >     1   150 DNAT       udp  --  eth0   any     anywhere  anywhere
> udp dpts:5010:5013 to:192.168.0.2 
> >     0     0 DNAT       tcp  --  eth0   any     anywhere  anywhere
> tcp dpt:1720 to:192.168.0.2 
> >     2   268 DNAT       udp  --  eth0   any     anywhere  anywhere
> udp dpts:5000:5003 to:192.168.0.2 
> >     0     0 DNAT       tcp  --  eth0   any     anywhere  anywhere
> tcp dpts:30000:30010 to:192.168.0.2 
> > 
> > Chain POSTROUTING (policy ACCEPT 2 packets, 142 bytes)
> >  pkts bytes target     prot opt in     out     source    destination
> 
> >     1   150 ACCEPT     udp  --  any    eth1    anywhere  192.168.0.2
> udp dpts:5010:5013 
> >     0     0 ACCEPT     tcp  --  any    eth1    anywhere  192.168.0.2
> tcp dpt:1720 
> >     2   268 ACCEPT     udp  --  any    eth1    anywhere  192.168.0.2
> udp dpts:5000:5003 
> >     0     0 ACCEPT     tcp  --  any    eth1    anywhere  192.168.0.2
> tcp dpts:30000:30010 
> > 
> > -------------------------
> > eth0 is the external interface and eth1 is the internal.  
> > GM runs on 192.68.0.2.
> > 
> > Seems to me something is moving on the 5000:5013
> > ports.  No record of DROPed packets relevant to
> > our matter.  However, it fails, and Microtelco
> > does not charge.  Here is the history as
> > registered by GM.  I call myself but I do not hear
> > any rings on the other phone.  The first call ends
> > with a busy signal, and the second also but very
> > quickly with "Remote user cleared the call".  What
> > sense can be made out of this?
> > 
> > 
> > ------------------------
> > 0:15:05 Started GnomeMeeting V0.98 for weg
> > 
> > 20:15:05 Using Quicknet device Internet PhoneJACK-ISA /dev/phone0
> > 20:15:37 Gatekeeper set to bmac 66 7 159 99
> > 20:16:15 Phone is off hook
> > 20:16:35 Calling h323:765497xxxx
> > 20:16:37 Attaching lid hardware to codec
> > 20:16:37 Started New Logical Channel...
> > 20:16:37 Sending G.723.1A(6.3k)-Cisco{hw}
> > 20:16:37 Enabled silence detection for G.723.1A(6.3k)-Cisco{hw}
> > 20:16:37 Attaching lid hardware to codec
> > 20:16:37 Started New Logical Channel...
> > 20:16:37 Receiving G.723.1A(6.3k)-Cisco{hw}
> > 
> >         Rings and then sounds busy and  I put the
> >         handset on the hook.
> > 
> > 
> > 20:17:02 Phone is on hook
> > 20:17:02 Trying to stop calling
> > 20:17:03 Local user cleared the call
> > 20:19:07 Phone is off hook
> > 20:19:07 Calling h323:765497xxxx
> > 20:19:09 Remote user cleared the call
> > 20:19:13 Phone is on hook
> > 
> > --------------------
> > 
> > I use GM 0.98.5, and the nixj driver is cvs
> > from October 1 or thereabout.  
> > 
> > Sincerely,  eythan
> > 
> > _______________________________________________
> > GnomeMeeting-list mailing list
> > GnomeMeeting-list gnome org
> > http://mail.gnome.org/mailman/listinfo/gnomemeeting-list
-- 
 _	Damien Sandras
(o-	GnomeMeeting: http://www.gnomemeeting.org/
//\	FOSDEM 2003:  http://www.fosdem.org
v_/_	
	H.323 phone:  callto://ils.seconix.com/dsandras seconix com