similar to: Sip Traffic

Hi We are currently using Asterisk 1.2.4 with IAX and app_meetme for conferencing, but are looking to move to SIP because of issues with an IAX control we're using. The reason we moved from SIP to IAX in the first place was because of the poor NAT traversal with SIP. At that stage we were using Asterisk 1.0.*. How does Asterisk 1.2.4 handle NAT traversal and firewalls compared to the older

I'm wondering if anyone can recommend one over the other. I'm mostly interested in running open source solutions, so I would prefer if your recommendations are within the open source arena. Basically, I contemplated the idea of using SER as a NAT Helper and possibly as a SIP server for a portion of our user base. We prefer to have Asterisk in the mix because of the additional

What is the best solution? I dont want to have modify firewall's at all or do port fowarding. Ideally I would like a solution that with either a softphone or wireless hardphone one could connect via friends, family, or hotspots without reconfiguring their devices. What are people using? STUN? SER? Thanks in advance! -blake -------------- next part -------------- An HTML attachment was

Hi everyone, I decided to have a look at SIP & NAT again and I've been at it for a [quite a] few hours but typically nothing is working for me. Actually I'm not sure if SIP and NAT can ever work but some emails on this list do suggest that someone has got it working, once, maybe. I'm experimenting with a ZyXEL 2000W [WiFi Sip phone] which supports "Outbound Proxy",

Hello, Let me first start by saying Shorewall is awesome, and I use it everywhere from single box firewall, to home network firewall, even to our corporate firewall. I am experiencing a problem getting my home firewall to work with my BroadVoice VoIP connection. I use the Sipura SPA-2100 ATA (Analog Telephone Adapter) that came with my BroadVoice account. This happened when I tried to replace

Hi, I''ve a linux as router nat + firewall (POLICY DROP for INPUT OUTPUT and FORWARD) but, I''ve put next rules for p2p software on FORWARD chain [... snip ... ] iptables -F FORWARD iptables -P FORWARD DROP iptables -A FORWARD -p tcp --dport 80 -j ACCEPT iptables -A FORWARD -p tcp --dport 25 -j ACCEPT [... snip ... ] iptables -A FORWARD -m ipp2p --ipp2p -j ACCEPT iptables -A

I have four-interface Shorewall config set up. The "dmz" interface is bridged with "net" so I can assign public IP''s to the servers in the DMZ. I opted to do this rather than SNAT or ARP proxying because one of the servers runs Asterisk and SIP and NAT don''t always work well together. Somehow, my firewall config is causing a one-way audio problem in

[Off topic ?] Somebody can help me to convince some people to use Linux instead MikroTik ???? Happy new year. Andres.

Hi! How I can use L7-Filter (http://l7-filter.sourceforge.net/) with Shorewall? Thank you very much! Bye. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

Hi, can anybody comment on the cost of matching with IPP2P vs. Layer7. Also, does a iptables rule with more complicated matching mechanism also slow down processing if all the packets are matched before they reach the rule. I.e. is the mere existence of a potentially costly rule already slowing down processing or only if packets are actually processed by it? Thanks very much in advance.

Hi, I want to set up a Linux as Access Point, and maybe, as router too. There is some distro or minidistro in order to do that ? thanks in advance andres

Hello, all. Since implementing an iptables firewall between the Asterisk PBX and several SIP phones, the Asterisk PBX ability to "reinvite" has been broken even when the phones are on the same network (i.e., no firewall between the phones). We've been beating our heads against the wall thinking it was the complex rule set but it appears the issue is ip_conntrack_sip. Before I drop

re I would like to do some firewalling and p2p shaping/limiting on one of the vlans in my network and I was thinking of using linux box as transparent bridged firewall/limiter. For this I''m planning to use AMD64 2.2Ghz box with 2 1gbit NIC (Broadcom 5721), that will be bridged. The box must be totally transparent and unseen in the network, as well as it should have much influence on

on Fair NAT: ------------- [...] # Correcting TOS for large packets with Minimize-Delay-TOS $BIN_IPT -t mangle -A $FN_CHK_TOS -p tcp -m length --length 0:512 -j RETURN $BIN_IPT -t mangle -A $FN_CHK_TOS -p udp -m length --length 0:1024 -j RETURN $BIN_IPT -t mangle -A $FN_CHK_TOS -j TOS --set-tos Maximize-Throughput $BIN_IPT -t mangle -A $FN_CHK_TOS -j RETURN [...] I think that best is: [...] #

hi all, I''m writing not for technical problems but for a simple question. Do You know if there is a distro which is ready for traffic shaping etc. ''out of the box''? I mean a distro which does not require patching the kernel and/or iptables and/or installing from source etc. and gives the user most of the tools needed (imq, ipp2p, l7filter and so on). many thanks

I had been using L7-Filter[1] successfully for edonkey/eMule traffic until recently. I upgraded to the latest release of mldonkey, 2.5.28a, which implements eMule compatibility, and with support for Kademlia[2] enabled, network latency increases greatly. [1] http://l7-filter.sourceforge.net/ [2] http://www.infoanarchy.org/wiki/wiki.pl?Kademlia Has anyone created a new pattern match for

Hey guys, Here''s an easy one. Is it possible to use the l7-filter extension on a box that performs NAT? The HOWTO says the filter only works 100% of the time if it can see both sides of the connection. I tried putting the l7 MARK rules in the POSTROUTING chain on a box that does NAT and it does successfully mark some packets. I''m not 100% sure if it''s working, or if

Hello every one! I''m making a project to a discipline in the university and the project is make a Linux router that grants QoS to Multimedia connections (the prof. say we can use Open Source Soft. :) or reinvent the wheel). I have been googeling and googeling and i found the l7-filter in source forge and the spectacular simple language that is TCNG. Well the problem is how can i

After varying degrees of success with p2p detection modules, I would like to write the following rules using iptables to reliably identify p2p traffic: 1. If a host on the network has 5 or more simutaneous tcp connections to ports above 1024, mark all connections to ports 1024 and above as 60. 2. If a host has received (or sent) UDP packets from 5 different hosts'' ports above 1024 in a

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=532 kaber@trash.net changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|laforge@netfilter.org |kaber@trash.net ------- Additional Comments From kaber@trash.net 2007-01-26 19:45 MET ------- (In reply to comment #0) >