Re: [Openh323gk-users] gnugk, NAT, DMZ

[Raphael F. B. <ra...@se...>]

Funny I've been getting these responses today after trying OpenPhone
(20021026-win32) for the first time,
on a setup that has been working up to now.
(GnuGK 2.0 on Linux and Win2000 clients with Netmeeting on LAN and over
Internet)
It started happening after I made a few calls from OpenPhone to Netmeeting
via GK.
The receiving NM crashed after a while and would give an error when trying
to restart it.
The machine even lost the network connection although the link LED on the
switch was still up.
It all went back to normal after the NM machine has been rebooted.
I put it down to MS's TCP stack....

----- Original Message -----
From: "Todd Pillars" <ka...@ch...>
To: <ope...@li...>
Sent: Saturday, October 26, 2002 5:41 PM
Subject: [Openh323gk-users] gnugk, NAT, DMZ


> I have a request to put a gatekeeper in the following layout:
>
>      Internet
> |
> |
> Cable Modem
> |
> |
> D-Link 604 (Firewall, NAT, DMZ)
> (ext 24.123.123.123 int 192.168.0.1 dmz 192.168.0.2)
> | | |
> | | |
>     Laptop    Desktop    gnugk/asterisk/pstngw
>  192.168.0.4 192.168.0.3 192.168.0.2
>
> Everything is in place and executes - internal users can connect and
> register to the gk internally at openh323gk@192.168.0.2 AND external users
> can connect and register to the gk externally at
openh323gk@24.123.123.123 -
> But users cannot make/recieve calls from internal to external. It errors
out
> with bandwidth not available (openphone) or user did not accept call
> (netmeeting).
>
> I am fairly new to gnugk, but experienced with linux. I am thinking that
it
> has something to do with the NAT served up by the d-link, the gnugk starts
> up with the internal ip (192.168.0.2) and the router passes the outside ip
> through but the gatekeeper is confused with the address. Is this correct?
Is
> there a workaround or step that I am missing?
>
> Also, there is no firewall in the DMZ (obviously ;) but the linux box is
> running iptables. I have ports 1720 & 21, 5000-5003 open and 30100+ open.
Is
> there some other ports that need opened up?
>
> Thanks for all help
> Todd Pillars
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: ApacheCon, November 18-21 in
> Las Vegas (supported by COMDEX), the only Apache event to be
> fully supported by the ASF. http://www.apachecon.com
> _______________________________________________
> Openh323gk-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openh323gk-users
>