Hey Everyone, I just emailed them. Lets see what I get back.. --David Hello Equivalence, I am the co-maintainer of the Linux IP Masquerading WWW site IP-MASQ HOWTO, author of TrinityOS for Linux, and strong poster on the Linux IP MASQ email list: MASQ WWW: http://ipmasq.cjb.net/ TrinityOS WWW: http://www.ecst.csuchico.edu/~dranch/LINUX/index-linux.html I was forwarded your URL and I first wanted to thank you for porting your work to Linux! Anywa, As I'm sure your WELL aware, the H.323 protocol is a VERY difficult one to master but it looks like your company is doing quite well. I have a few questions here: - Most Linux IP Masquerade users are concerned with security and usually use strong packet firewall rulesets. Since PhonePatch runs in parallel to IP MASQ, what issues will Linux users see that FILTER their Internet traffic. From my understanding, the kernel IPFWADM/IPCHAINS rulesets will block specified traffic before PhonePatch ever sees the traffic. True? If so, what ports are required to be allowed in to let PhonePatch work? Any plans to add a feature to announce what ports are required for a given H.323 conversation through the firewall? This would allow Linux users to modify their firewall rulesets on the fly to both maintain H.323 functionality while keeping security up. Any thoughts would be appreciated! --David .----------------------------------------------------------------------------. | David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] | !---- ----! `----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----' _______________________________________________ Masq maillist - [EMAIL PROTECTED] http://tiffany.indyramp.com/mailman/listinfo/masq Admin requests can be handled by web (above) or [EMAIL PROTECTED]
