Re: cornfedsip: voip and sip protocol problems

Of course, otherwise the "userdefined" sections in the guarddog- generated 
firewall script would not be present.

There are some funny things: (look for the previous message)

1) the difference between the ipchains and the iptables rules. The ipchains 
section of the guarddog-firewall script works with kernel 2.2 or lower. In 
this part the communication seem to be bidirectional.
In the iptables (i have debian sarge, kernel 2.6.8, an then is the active part 
of the script!) the communication is NOT bidirectional, as the are three 
missing iptables rules (compared to the ipchains). So this seems to be a BAD 
BUG in guarddog, that doesn't generate a correct script for bidirectional 
user defined ports (i checked the bidirectional option, of course).

2) Even more surprisingly: i tried to add the three missing iptables rules by 
hand, on a hot running firewall. It doesn't change anything! Manual opening 
of the missing sockets does not work. I think that somewere in the guarddog 
script there is a rule that inhibits generally the opening of bidirectional 
user defined ports.

I think that guarddog developpers shoult take care of my observation deeply.

I also thik that at least for general SIP and STUN services there should be a 
predefined checkbox, avoiding this manual play.

Thanks

Merry Christmas and happy new yera for everybody

giorgio

Alle 11:14, venerdì 23 dicembre 2005, ryan ha scritto:
> On Thursday 22 December 2005 09:06, Giorgio Pioda wrote:
> > Why then is not working?
>
> Did you check the boxes for 5004 (user defined) Internet and Local?
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log
> files for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Guarddog-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/guarddog-user


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click