Re: [GnomeMeeting-list] Partial success!

[Josep Puigdemont <baldrick terra es>]

Hi Anne,

I also use shorewall with GnomeMeeting. I don't know for you, but my
firewall is located in my gateway (on another computer), so I have to 
use DNAT and forward the ports to a my computer inside the network.
If your videoconference computer is the same as your firewall, then the
rules should be ok, if it is just a gateway, like for me, change
"ACCEPT" for "DNAT", and specify a computer inside your network, like:

# Rules for GnomeMeeting
DNAT            net     loc:192.168.1.4         tcp     1720
DNAT            net     loc:192.168.1.4         tcp     30000:30010
DNAT            net     loc:192.168.1.4         udp     5000:5003

The internal IP for my computer is 192.168.1.4, and my internal network
is called "loc" in the "zones" configuration file of Shorewall. And
"net" defines the Internet zone.


Damien, maybe we could add this into the FAQ, for shorewall users? I
think Mdk ships with shorewall as default "firewall" (well, it is not
really a firewall it just makes iptables easier :)


Salut!

/Josep

P.S.: Waiting for tomorrow's party!

On Mon, 2004-03-01 at 11:38, Damien Sandras wrote:
> Le dim 29/02/2004 à 22:03, Anne Wilson a écrit :
> 
> > #For GnomeMeeting, next 4 lines
> > #	GM listen port
> > ACCEPT net	fw	tcp 	1720
> > #	Needed unless both clients are using H.245 tunneling (NM can't)
> > ACCEPT	net	fw	tcp	30000:30010
> > #	For RTP and RTCP channels, audio and video transmission/reception
> > ACCEPT	net	fw	udp	5000:5003
> > #	Needed for use with a gatekeeper
> > #ACCEPT	net	fw	upd	5010:5013
> > 
> > but we still could not make contact.  Finally he stopped ZA and I 
> > stopped shorewall, and the call went through.  Is there something 
> > wrong with my rules in Shorewall?  Have I missed something?
> > 
> 
> I don't know shorewall, but it seems the rules are ACCEPT, if you are
> behind a NAT gateway, then you need to FORWARD those ports (see the
> FAQ).
> 
> 
> > Then, for a minute or so we both had audio and video, then my remote 
> > picture froze.  He said that he was still receiving from me, and the 
> > audio was fine - much better for me than when I tried NetMeeting last 
> > year - but I only had a still picture of him.  His screen was still 
> > showing moving pictures.
> > 
> > Any pointers as the what is wrong, please?
> > 
> > Anne
> > - -- 
> > Registered Linux User No.293302
> > Have you visited http://twiki.mdklinuxfaq.org yet?
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.2 (GNU/Linux)
> > 
> > iD8DBQFAQlOYkFAvMr/nNX8RAi1kAJ9D95tCGAYrZt2dgXmGLn0LDCDwcgCglczl
> > 3kEdSmRFqMBpk7x4iYhNXek=
> > =kcVA
> > -----END PGP SIGNATURE-----
> > 
> > _______________________________________________
> > GnomeMeeting-list mailing list
> > GnomeMeeting-list gnome org
> > http://mail.gnome.org/mailman/listinfo/gnomemeeting-list