H323, Netmeeting and Videoconference

[Stefan_Walther]

Hi folks,

at first thanks for the fast fix for NEWNAT in the last weeks.

Now I had installed it with kernel 2.4.18, but there is one problem left. Maybe there is someone who can tell me how I can fix it.

Netmeeting now works fine except the videoconference. I can access the whiteboard and the chat, but I cannot see the video or can hear the audio from my partner on the other side. The same way is the other way around.

I had configured everthing directly to the kernel no modules. I have and T-DSL con and I'm using masquerading.

Here is my config:



Best Regards,
MfG.

Stefan Walther
[EMAIL PROTECTED]
dienst.: +4930/89786448
Funk: +49172/3943961#!/bin/bash

<--snip-->
# set -x

EXT="ppp0"
INT="eth0"
LO="lo"

INTIP="192.168.0.1"
ANY="Any/0"
PRIVP="0:1023"
UNPRI="1024:65535"

echo 1 > /proc/sys/net/ipv4/tcp_syncookies
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
        echo 1 > f
done
echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -X
iptables -F
iptables -t nat -F
iptables -t nat -X

iptables -A INPUT   -i $INT -j ACCEPT
iptables -A OUTPUT  -o $INT -j ACCEPT
iptables -A FORWARD -i $INT -j ACCEPT
iptables -A FORWARD -o $INT -j ACCEPT

iptables -A INPUT  -i $LO -j ACCEPT
iptables -A OUTPUT -o $LO -j ACCEPT

iptables -t nat -A POSTROUTING -o $EXT -j MASQUERADE
iptables -A FORWARD -i $EXT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i $EXT -m state --state NEW -j ACCEPT

iptables -A OUTPUT -o $EXT -p udp --sport 1024:65535 --dport 53 -j ACCEPT
iptables -A INPUT  -i $EXT -p udp --sport 53 --dport 1024:65535 -j ACCEPT
iptables -A OUTPUT -o $EXT -p tcp --sport $UNPRI --dport 53 -j ACCEPT
iptables -A INPUT  -i $EXT -p tcp --sport 53 --dport $UNPRI -j ACCEPT

iptables -A FORWARD -i $EXT -p tcp --dport 113 --syn -j REJECT

iptables -A INPUT -j LOG --log-prefix "input "
iptables -A OUTPUT -j LOG --log-prefix "output "
iptables -A FORWARD -j LOG --log-prefix "forward "
<--snip-->