I don't use astfw or I would test this myself.
Can someone else please give it a go and report back to me?
Thanks,
-Philip
Index: target/generic/target_skeleton/stat/etc/rc.conf
===================================================================
--- target/generic/target_skeleton/stat/etc/rc.conf (revision 1546)
+++ target/generic/target_skeleton/stat/etc/rc.conf (working copy)
@@ -270,11 +270,17 @@
##EXTOPEN
##A list of ports (with protocol) that will be opened on the external
-#interface to the AstLinux machine. Here you can add access to IAX
-##SIP, etc.
+#interface to the AstLinux machine. Here you can add access to IAX, etc.
##t= tcp u= udp
#EXTOPEN="t22 u4569"
+#
+##SIP_PORTS
+##A list of ports (UDP only for now) that SIP uses. These can be for either
+##multiple registration end-points or for SIP phones behind the firewall.
+##8 max when using arnofw.
+#SIP_PORTS="5060 5061 5062 5063 5064"
+
##EXTOPENSRC
##We will allow any traffic from these IP addresses. As usual, multiple
entries
##can be specified using spaces. Standard iptables netmask and CIDR notation
is
Index: package/iptables/astfw
===================================================================
--- package/iptables/astfw (revision 1546)
+++ package/iptables/astfw (working copy)
@@ -36,9 +36,20 @@
# protect against syn flood attacks
echo 1 >/proc/sys/net/ipv4/tcp_syncookies
+SIPCOMMA=""
+for i in $SIP_PORTS
+do
+SIPCOMMA="$SIPCOMMA${SIPCOMMA:+,}$i"
+done
+
modprobe ip_conntrack_ftp
modprobe ip_conntrack_tftp
modprobe ip_conntrack_irc
+if [ "$SIPCOMMA" ]
+then
+modprobe ip_conntrack_sip ports="$SIPCOMMA"
+modprobe ip_nat_sip
+fi
modprobe ip_nat_ftp
modprobe ip_nat_tftp
modprobe ip_nat_irc
@@ -145,9 +156,18 @@
done
fi
+#
+# this is tedious but necessary
+#
+EXTPLUS=""
+for i in $SIP_PORTS
+do
+EXTPLUS="$EXTPLUS u$i"
+done
+
-if [ "$EXTOPEN" ]
+if [ "$EXTOPEN" -o "$EXTPLUS" ]
then
-for i in $EXTOPEN
+for i in $EXTOPEN $EXTPLUS
do
if `echo $i | grep -q "u"`
then
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Astlinux-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to [EMAIL
PROTECTED]
