Re: guarddog, syslog & wengo

Look this small piece of the firewall script...

Upper part: hand modified script
Lower part: guarddog original script

#####################
> # Allow 'userdefined1'
> #iptables -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
> iptables -A f0to1 -p udp --sport 5060:5060 --dport 0:65535 -m state --state NEW -j ACCEPT
> # Allow 'userdefined3'
> #iptables -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT
> iptables -A f0to1 -p udp --sport 3478:3479 --dport 0:65535 -m state --state NEW -j ACCEPT
> # Allow 'userdefined2'
> #iptables -A f1to0 -p udp --sport 0:65535 --dport 5004:5004 -j ACCEPT
> iptables -A f0to1 -p udp --sport 5004:5004 --dport 0:65535 -m state --state NEW -j ACCEPT
> 
> 
> # Allow 'userdefined1'
> #iptables -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
> # Allow 'userdefined3'
> #iptables -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT
> # Allow 'userdefined2'
> #iptables -A f1to0 -p udp --sport 0:65535 --dport 5004:5004 -j ACCEPT
########################################

You see that I introduced bidirectionality by hand on the stun port
(3478-3479) and on audio ports (5060, and 5004).

You have to do the same...

First, look into the rejected packages and find out which socket are
needed for wango (or find this information in a good documentation).

Second: create your custom TCP, UDP rules with guarddog (in the last
part of the guarddog menu)

Third: export the firewall script, modify it manually and load it back
into the correct rc.path (so that it starts automatically at boot time)
or import it back into guarddog.

greetings again

gfwp


Dave S ha scritto:
> On Tuesday 05 December 2006 14:10, Rolf Pedersen wrote:
>> Dave S wrote:
>>> .....
>>> 'wengo' or 'wengophone' - think of skype but opensource & open standards
>>> - with video etc
>>>
>>> http://openwengo.com/
>>> .....
>> Did you try their forum? http://forum.wengo.com/index.php
> 
> I did a while ago without any bites, however now I know I need to let the SIP 
> protocol through I might give it another go.
> 
> Cheers
> 
> Dave
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Guarddog-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/guarddog-user
> 


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV