* Shachar Shemesh <[EMAIL PROTECTED]> [031202 08:05]: > On the other hand, when I use MSN messenger on Windows, I get > bidirectional video (but problematic Audio, though that may be due to a > different reason). > > Is there some special NAT handler for H323?
H323 (NetMeeting) and SIP (MSN) require ALGs to function behind a NAT/Firewall box, SIP is somewhat a mess and H323 is an horror from outer space. Older versions of MSN used H323 too, so the exact protocol of MSN depends on the version too. There are patches for IPTables to support these protocols, but it's not in the mainline kernels, but rather in the NetFilter development site. You can get it with the patch-o-matic from NetFilter. The other solution is to setup UPNP on the gateway and have the programs tell it what ports to open and forward. That's what MSN messenger on Windows does when it works with a UPNP enabled gateway. UPNP is obviously a security hole since any rogue program can open whatever ports it wants and have them forwarded to any machine it wants. There is a (seemingly dead) project to implement UPNP for Linux, search google for it, it might be in a somewhat working condition, I've never tried it. Baruch ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
