Hi all,

Thank you for your replies.

#set  NM
/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 1720 -j DNAT --to
192.168.100.1-192.168.100.16
/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 1503 -j DNAT --to
192.168.100.1-192.168.100.16

I did the same and now it works (i forgot to forward port 1503). Thank you 
very much.
Now, i want to report a 'bug' or at least a strange behavior of h323 
conntrack helper :

if we use 2 pcs behind 2 NAT routers with this schematic :


                            ________________
PC 1 ---- NAT router 1 ===[    internet    ]=== NAT router 2 ---- PC 2
                           [________________]

if (private) IP address of PC 1 is equal to (private) IP address of PC 2, 
then we are not able to do any connections from PC 1 to PC 2, even if we 
forward the right ports to the right places.

if those IP addresses are different, it works well.

Is this normal ?
(i think not because PC 1 IP address is replaced by public IP address from 
NAT router 1 in all outgoing packets)

By the way, does anybody know another way to setup NAT and h323 ? Someone 
talks about working with a proxy, is it possible ? (with netmeeting ?)

-- 
Clément Moreau
Inventel Systèmes -- www.inventel.com
PARIS

Meet Inventel at those shows / Nos prochains rendez-vous :
- CeBIT 2002 March 13-20 : Hall 27 / Booth F23 & Hall 13 Bluetooth
pavilion
- Bluetooth Congress Amsterdam 2002 June 11-14 / Booth 401

****************************************************************************
Ce message et ses pieces jointes contiennent des informations
confidentielles.
Il est etabli a l'intention exclusive de ses destinataires.
Si vous n'en etes pas destinataire, merci de le detruire et d'en avertir
immediatement l'expediteur.
L'integrite de ce message ne pouvant etre garantie sur Internet, Inventel
Systemes ne peut etre tenue responsable de son contenu.

This e-mail and its attachments are confidential and intended solely for the
addressees.
If you are not the intended recipient of this message, then please delete it
and notify the sender.
Since the integrity of this message cannot be guaranteed on the
Internet,Inventel Systemes cannot therefore be considered responsible for
its content.
****************************************************************************



Reply via email to