similar to: Re: Problem with H323 traffic using PPTP over Shorewall.

Hi friends, I need help. I''ve PPTP Server running behind Shorewall. The PPTP server is working OK in my LAN, but I want to connect outside and It isn''t working. I''ve configurate shorewall like http://www.shorewall.net/PPTP.htm. I add only this lines in my rules DNAT net loc:165.182.15.15 tcp 1723 - IPext DNAT net loc:165.182.15.15 47 - - IPext It isn''t

Hi, just configured a shorewall-box with identical setting as a machine which works for passing pptp via dnat to an internal pptp server (win). Unfortunately we cannot establish a connection and tcpdump tells (from firewall to client) icmp: my_host protocol 47 unreachable [tos 0xc0]. What could I do now, to troubleshoot? We followed exactly the dnat settings in your docu. Thx Andy

Ok I'm confusEd at this point. I have Asterisk installed with the h323 channel driver compiled and installed. I also installed gnugk. Is it needed? When I use it as a gatekeeper I'm seeing no interaction with asterisk. If I dial straight to asterisk with netmeeting I get the default extension and I can see asterisk trying to play the "congrats-demo" file but I hear

The problem scenario I describe was reported previously in the Shorewall lists but its resolution does not seem to have made it into the lists. Scenario: Windows XP client seeking to establish a VPN connection to a Windows 2003 Server located behind a Shorewall firewall (running on Mandrake kernel 2.4.22-37mdk). The connection cannot be made, the client reports error code 721. Discussion:

Hi all, I´m running a server that frecuently needs to open a pptp session with a remote server outside my Company. This server is running behind a Shorewall firewall and I don´t find information in Shorewall web page because there is no information in the link http://www.shorewall.net/PPTP.htm#ClientsBehind Nowadays I can connect this server with the remote one but te session is closed after

I have a centos 4 i386 machine that works like a router (iptables filter, NAT) with two NIC''s. One NIC is connected to my ISP (100 Mbit FTTH), I get a DHCP assigned public IP that changes "sometimes". Most incoming ports are blocked by my ISP. In order to get a fixed IP and open ports, I have to set up a PPTP tunnel to the ISP. The default gw and the NAT''ing goes to

hello, Im tryin to make Calls from MS Netmeeting(h323) to Xlite(SIP) it rings, but as soon as i answered it dissconnects!!!! This is what i get from the Asterisk console: -- Executing Dial("OH323/R27469", "SIP/xlite1|10") in new stack Aug 13 10:19:03 DEBUG[524304]: chan_sip.c:1265 create_addr: Setting NAT on RTP to 0 Aug 13 10:19:03 DEBUG[524304]: chan_sip.c:1500 sip_call:

Hi all. I can''t seem to get the h323 connection tracking configured correctly for Shorewall. I am using the Debian Shorewall 4.5.16.1 package. I am running a Debian 3.9 kernel like so: # uname -a Linux gw 3.9-1-amd64 #1 SMP Debian 3.9.8-1 x86_64 GNU/Linux My version of iptables is: # iptables -V iptables v1.4.20 If I add the following rule in the /etc/shorewall/tcrules file to

Hi! I am in a H.323 network with a gatekeeper and some terminals. Asterisk is a gateway between this network and the SIP network. Now I can do calls from de foreign network (SIP) to the locla (H.323) but I don't know how to do the inverse. The H.323 terminals use NetMeeting, and when I try to make a call, it says that the number dialed must be registered in the gatekeeper. How can I register

Good Morning Everyone, I have a server that runs Shorewall/Samba/PPTP (Poptop). When we try to connect to the PPTP server from outside of the company, the Windows XP pro client can establish the connection. We can then ping the server and the clients behind the server without any problem, but the issue becomes that we cannot map to any of the shares on the samba server or to any client for that

What I''m doing: I have Shorewall on a SuSE 9.0 machine, which is the firewall/router on the network. External interface is eth0 172.16.1.1, internal interface is eth1 10.40.1.1. (I used the Two-interface Linux System Quickstart Guide). All works well with that configuration. I also use PPPD for dial-in clients, and have two modems for incoming calls. Recently I added VPN interface

Last question, I promise, I am running PopTop for PPTP on the same box as my firewall. I can connect to the box fine, but nothing will route between the VPN tunnel and the local hosts. I read the Some Hosts have Special Firewalling Requirements article and though it was what I needed, but either I don''t get it, or it doesn''t apply to me. Here is my config: Zones: #ZONE

Hi, Has anyone ever succedded in shaping H323 traffic ? I mean reserve a certain bandwidth for it, in order to have a comfortable Netmeeting, and not be disturbed by downloads & others. I tried with HTB but it doesn''t seem perfect... Thanks for replies, Sam Vous manquez d’espace pour stocker vos mails ? Yahoo! Mail vous offre GRATUITEMENT 100 Mo ! Créez votre Yahoo! Mail

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=54 Summary: Kernel crash with pptp connectiontrack Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: Gentoo Status: NEW Severity: major Priority: P2 Component: connection tracking AssignedTo:

Hi, I configured pptp client and it connected successfully. but after sometimes it automatically got disconnected. /var/log/messages : Jul 15 15:29:19 ahc151l pppd[4725]: pppd 2.4.5 started by root, uid 0 Jul 15 15:29:19 ahc151l pppd[4725]: Using interface ppp0 Jul 15 15:29:19 ahc151l pppd[4725]: Connect: ppp0 <--> /dev/pts/2 Jul 15 15:29:19 ahc151l NetworkManager[852]: <info>

Hello, We can't connect to our pptp server through our CentOS gateway with a XP client. The linux client is working but not the XP client. I know for a fact that the pptp server is not the problem because if I connect the XP machine directly to the Internet the pptp vpn is working. I know about the pptp-conntrack-nat patch, I compiled the 2.4.9 kernel, with patch-o-matic-ng-20060511.tar.bz2

Hi, I am using Shorewall 2.0.6 on Debian with iptables 1.29. Before I was using Shorewall 2.0.3 and If work correctly, I am not sure that my problems begin after upgrade to 2.0.6, but my problem is that I can''t see some websites on the pc clients ( such as www.microsoft.com ), but some websites yes ( they are not in the pc cache ). My config is Shorewall as gateway/router of

There''s a lot new in 1.3.10: 1) You may now define the contents of a zone dynamically with the "shorewall add" and "shorewall delete" commands. These commands are expected to be used primarily within FreeS/Wan updown scripts. 2) Shorewall can now do MAC verification on ethernet segments. You can specify the set of allowed MAC addresses on the segment and you can

Hi ! Recently i switched my internet provider, to get more speed but another braindead setup regarding public ip addresses. I now have 4 PPTP Tunnel available, of which i''m using one as the gateway ip doing masquerading to other machines in my local lan, excluding three other machines, which i would like to use 1:1 nat to get them a direct access to one of the pptp tunnels. I was

hi all, i have one (teles) pbx with a BRI telephone and an outgoing E1 port. The outgoing E1 is connected to an pri_net port from my *. The incoming call will dail out to a h323 soft phone like openphone or sjphone or just netmeeting. The call will be conneted, but i don't hear any sound, from no one of the both sides. Can somebody help me? Thanks, Thomas.