Re: Firehol Problem - Please Help

On Wednesday 23 September 2009 09:12:25 pm you wrote:

Carlos, thanks a LOT, its worked. I have split 
nat to-destination 192.168.0.16 inface "${if_world}" proto tcp 
dport "${client_mygvsv_ports}"

and specified client_mygvsv_ports as "default" instead of port numbers. Second 
option was crucial, without it port forwarding did not worked correctly.

Now I have last task - QoS/traffic shaping setup for SIP VoIP (Asterisk).

I found this solution:
http://shearer.org/Linux_Shaping_Template

It consist of 2 parts - iptables script and traffic shaping script. I wonder 
if these scripts can be just executed after firehol (after editing interfaces 
according to the real setup)? Or may be its better to paste iptables script 
straight into firehol.conf?


Additionally, there is a very simple script (I think it is packaged by someone 
as wondershaper), but it seems its less effective then first one above.
http://www.nerdyideas.com/2009/09/05/qos-for-voip-in-linux/


> On Wed, Sep 23, 2009 at 3:21 PM, Andrei Verovski <[email protected]> 
wrote:
> > nat to-destination 192.168.0.16 inface "${if_world}" proto tcp
> > dport "${client_mygvsv_ports}"
>
> This doesn't look good. I don't think you can specify multiple ports
> as "dport". Try having two commands, one for each of the ports 5548
> and 5549.
>
> BTW, having those two ports as "client_mygvsv_ports" you are saying
> that clients will initiate connections to the server using only one of
> those two ports on their side. This wouldn't be strange if the
> protocol was UDP, but since it is TCP, try using "default" instead.



------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf