cornfedsip: voip and sip protocol problems
Giorgio Pioda <[email protected]>
| Newsgroups | gmane.network.guarddog |
|---|---|
| Organization | Pioderia |
| Message-ID | <[email protected]> |
I'm triing to configure guarddog to open Voip connection with cornfedsip I opened UDP 5004 and 5060 and STUN port 3784 but i'm not still able to make a call (connection itself works); the reason is in the /var/log/syslog below. Dec 22 14:33:01 linux kernel: DROPPED IN= OUT=eth0 SRC=192.168.1.2 DST=195.190.166.249 LEN=200 TOS=0x00 PREC=0x00 TTL=64 ID=7 DF PROTO=UDP SPT=5004 DPT=10094 LEN=180 Dec 22 14:33:01 linux kernel: DROPPED IN= OUT=eth0 SRC=192.168.1.2 DST=195.190.166.249 LEN=200 TOS=0x00 PREC=0x00 TTL=64 ID=8 DF PROTO=UDP SPT=5004 DPT=10094 LEN=180. Looking in the guarddog export-script I see the following lines # Traffic from 'Internet' to 'Locale' # Allow 'userdefined2' ipchains -A f0to1 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT ipchains -A f1to0 -p udp --sport 5060:5060 --dport 0:65535 -j ACCEPT # Allow 'userdefined6' ipchains -A f0to1 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT ipchains -A f1to0 -p udp --sport 5004:5024 --dport 0:65535 -j ACCEPT # Allow 'userdefined1' ipchains -A f0to1 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT ipchains -A f1to0 -p udp --sport 3478:3479 --dport 0:65535 -j ACCEPT under "ipchains" # Traffic from 'Locale' to 'Internet' # Allow 'userdefined2' ipchains -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT ipchains -A f0to1 -p udp --sport 5060:5060 --dport 0:65535 -j ACCEPT ... # Allow 'userdefined6' ipchains -A f1to0 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT ipchains -A f0to1 -p udp --sport 5004:5024 --dport 0:65535 -j ACCEPT # Allow 'userdefined1' ipchains -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT ipchains -A f0to1 -p udp --sport 3478:3479 --dport 0:65535 -j ACCEPT but under "iptables firewall" # Traffic from 'Internet' to 'Locale' # Allow 'userdefined2' iptables -A f0to1 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT # Allow 'userdefined6' iptables -A f0to1 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT # Allow 'userdefined1' iptables -A f0to1 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT ... # Traffic from 'Locale' to 'Internet' # Allow 'userdefined2' iptables -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT ... # Allow 'userdefined6' iptables -A f1to0 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT # Allow 'userdefined1' iptables -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT Why then is not working? Thank's giorgio ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click