Tom, For some strage reason its not working as it should is there any way tro transfer the valid ip address assigned to my ppp0 to the host?? Thanks Fernando Rodriguez V. frod@aitelecom.net AITelecom S.A. de C.V. http://www.aitelecom.net
From: Fernando Rodriguez> For some strage reason its not working as it shouldI had the same problem and from some docs found on the net I understand that''s a problem of the H.323 protocol, that encodes IP addresses within data packets; the firewall has no way to change them if you NAT, unless it uses some application gateway. Commercial routers often have this capability. I think that there is currently no solution with a Linux firewall. Elio ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Your H.323 application might have an option to set its public IP to something different from the computer''s IP. Or maybe not. Rune On 12/15/05, Elio Tondo <elio@tondo.it> wrote:> From: Fernando Rodriguez > > > For some strage reason its not working as it should > > I had the same problem and from some docs found on the net I understand > that''s a problem of the H.323 protocol, that encodes IP addresses within > data packets; the firewall has no way to change them if you NAT, unless > it uses some application gateway. Commercial routers often have this > capability. I think that there is currently no solution with a Linux firewall. > > Elio > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
Rune wrote on 15/12/2005 06:25:44:> Your H.323 application might have an option to set its public IP to > something different from the computer''s IP. Or maybe not.wouldn''t proxyarp do the trick? cheers -- Eduardo Ferreira
From: Eduardo Ferreira> > Your H.323 application might have an option to set its public IP to > > something different from the computer''s IP. Or maybe not. > > wouldn''t proxyarp do the trick?If you have a spare public IP, I think it works. But, if I remember correctly, the original question was related to a single-IP ADSL link: | I have a DSL connection to the internet that gives me only one valid | dynamic ip (ppp0=net) Elio ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
On Thursday 15 December 2005 04:52, Eduardo Ferreira wrote:> Rune wrote on 15/12/2005 06:25:44: > > Your H.323 application might have an option to set its public IP to > > something different from the computer''s IP. Or maybe not. > > wouldn''t proxyarp do the trick?Not with a single external IP address. And NEVER when using PPP. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key