Networking Forums

Networking Forums > Computer Networking > Linux Networking > Help on NetMeeting over iptable

Reply
Thread Tools Display Modes

Help on NetMeeting over iptable

 
 
Eric
Guest
Posts: n/a

 
      10-03-2003, 10:51 AM
Dear All

I have problem in enabling netmeeting over a RH9 linux firewell
running iptable.

I have patched the kernel and set the port forwarding rules in the
firewell script.

When I use 'lsmod' have the following result :

<================================================= ==========>
ipt_REJECT 3928 4 (autoclean)
ipt_unclean 8024 2 (autoclean)
ipt_LOG 4184 5 (autoclean)
ipt_state 1080 110 (autoclean)
iptable_mangle 2776 0 (autoclean) (unused)
iptable_filter 2412 1 (autoclean)
ip_conntrack_h323 3424 1 (autoclean)
ip_nat_h323 3356 0 (unused)
ip_conntrack_ftp 5296 1 (autoclean)
ip_nat_ftp 4112 0 (unused)
iptable_nat 21720 3 [ip_nat_h323 ip_nat_ftp]
ip_tables 15096 9 [ipt_REJECT ipt_unclean ipt_LOG
ipt_state iptable_mangle iptable_filter iptable_nat]
ip_conntrack 26976 4 [ipt_state ip_conntrack_h323
ip_nat_h323 ip_conntrack_ftp ip_nat_ftp iptable_nat]
autofs 13268 0 (autoclean) (unused)
3c59x 30704 2
ext3 70784 2
jbd 51892 2 [ext3]
<================================================= ==========>

and the firewell script is like that :

<================================================= ==========>
# Add NetMeeting Support one-to-one IP Mapping
H323_PORTS="389 522 1503 1720 1731 8080"
HI_PORTS="1024:65535"

if [ -e $IPMap ]; then
DST_PORTS=`echo $HI_PORTS|tr : -`

ip_map=`grep -v ^# $IPMap`

for i in $ip_map; do
ip_src=`echo $i|cut -d: -f1`
ip_des=`echo $i|cut -d: -f2`

for PORT in $H323_PORTS; do
iptables -t nat -A PREROUTING -i $EXTERNALIF -p tcp -d $ip_src
--dport $PORT -m state --state
NEW,ESTABLISHED,RELATED -j DNAT --to-destination $ip_des:$PORT
done

# iptables -t nat -A PREROUTING -i $EXTERNALIF -p udp -d $ip_src
--dport $HI_PORTS -m state --sta
te ESTABLISHED,RELATED -j DNAT --to-destination $ip_des:$HI_PORTS
iptables -t nat -A PREROUTING -i $EXTERNALIF -p udp -d $ip_src
--dport $HI_PORTS -m state --stat
e ESTABLISHED,RELATED -j DNAT --to-destination $ip_des:$DST_PORTS
done
fi
<================================================= ==========>

that script can work at the begining but
I cannot connect to the internal PC with its related true IP
from external

I have search over the news group but did not find any case like that

Could anyone give me an help hand or point me a right direction?

Thanks a lot
Eric
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
NAT issue with iptable crowl@gmx.de Linux Networking 4 06-22-2005 05:10 PM
iptable freezeup Sargon Linux Networking 1 12-15-2003 11:47 AM
iptable chewing up CPU Your name Linux Networking 0 10-17-2003 02:50 AM
RFE entries in IPTABLE Rob Simac Linux Networking 2 09-25-2003 04:27 PM
iptable question Rob Simac Linux Networking 1 09-11-2003 09:46 PM



1 2 3 4 5 6 7 8 9 10 11