cornfedsip: voip and sip protocol problems

Giorgio Pioda <[email protected]>
Newsgroups gmane.network.guarddog
Organization Pioderia
Message-ID <[email protected]>
I'm triing to configure guarddog to open Voip connection with
cornfedsip
I opened UDP 5004 and 5060 and STUN port 3784 but i'm not still able to make a 
call (connection itself works); the reason is in the /var/log/syslog below.

Dec 22 14:33:01 linux kernel: DROPPED IN= OUT=eth0 SRC=192.168.1.2 
DST=195.190.166.249 LEN=200 TOS=0x00 PREC=0x00 TTL=64 ID=7 DF PROTO=UDP 
SPT=5004 DPT=10094 LEN=180
Dec 22 14:33:01 linux kernel: DROPPED IN= OUT=eth0 SRC=192.168.1.2 
DST=195.190.166.249 LEN=200 TOS=0x00 PREC=0x00 TTL=64 ID=8 DF PROTO=UDP 
SPT=5004 DPT=10094 LEN=180.

Looking in the guarddog export-script I see the following lines

# Traffic from 'Internet' to 'Locale'
# Allow 'userdefined2'
ipchains -A f0to1 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
ipchains -A f1to0 -p udp --sport 5060:5060 --dport 0:65535 -j ACCEPT
# Allow 'userdefined6'
ipchains -A f0to1 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT
ipchains -A f1to0 -p udp --sport 5004:5024 --dport 0:65535 -j ACCEPT
# Allow 'userdefined1'
ipchains -A f0to1 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT
ipchains -A f1to0 -p udp --sport 3478:3479 --dport 0:65535 -j ACCEPT

under "ipchains"
# Traffic from 'Locale' to 'Internet'
# Allow 'userdefined2'
ipchains -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
ipchains -A f0to1 -p udp --sport 5060:5060 --dport 0:65535 -j ACCEPT
...
# Allow 'userdefined6'
ipchains -A f1to0 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT
ipchains -A f0to1 -p udp --sport 5004:5024 --dport 0:65535 -j ACCEPT
# Allow 'userdefined1'
ipchains -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT
ipchains -A f0to1 -p udp --sport 3478:3479 --dport 0:65535 -j ACCEPT

but under "iptables firewall"

# Traffic from 'Internet' to 'Locale'
# Allow 'userdefined2'
iptables -A f0to1 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
# Allow 'userdefined6'
iptables -A f0to1 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT
# Allow 'userdefined1'
iptables -A f0to1 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT
...
# Traffic from 'Locale' to 'Internet'
# Allow 'userdefined2'
iptables -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
...
# Allow 'userdefined6'
iptables -A f1to0 -p udp --sport 0:65535 --dport 5004:5024 -j ACCEPT
# Allow 'userdefined1'
iptables -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT

Why then is not working?

Thank's

giorgio





-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.