Re: guarddog, syslog & wengo

On Wednesday 06 December 2006 19:58, Giorgio Pioda wrote:
> Look this small piece of the firewall script...
>
> Upper part: hand modified script
> Lower part: guarddog original script
>
> #####################
>
> > # Allow 'userdefined1'
> > #iptables -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
> > iptables -A f0to1 -p udp --sport 5060:5060 --dport 0:65535 -m state
> > --state NEW -j ACCEPT # Allow 'userdefined3'
> > #iptables -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT
> > iptables -A f0to1 -p udp --sport 3478:3479 --dport 0:65535 -m state
> > --state NEW -j ACCEPT # Allow 'userdefined2'
> > #iptables -A f1to0 -p udp --sport 0:65535 --dport 5004:5004 -j ACCEPT
> > iptables -A f0to1 -p udp --sport 5004:5004 --dport 0:65535 -m state
> > --state NEW -j ACCEPT
> >
> >
> > # Allow 'userdefined1'
> > #iptables -A f1to0 -p udp --sport 0:65535 --dport 5060:5060 -j ACCEPT
> > # Allow 'userdefined3'
> > #iptables -A f1to0 -p udp --sport 0:65535 --dport 3478:3479 -j ACCEPT
> > # Allow 'userdefined2'
> > #iptables -A f1to0 -p udp --sport 0:65535 --dport 5004:5004 -j ACCEPT
>
> ########################################
>
> You see that I introduced bidirectionality by hand on the stun port
> (3478-3479) and on audio ports (5060, and 5004).
>
> You have to do the same...
>
> First, look into the rejected packages and find out which socket are
> needed for wango (or find this information in a good documentation).
>
> Second: create your custom TCP, UDP rules with guarddog (in the last
> part of the guarddog menu)
>
> Third: export the firewall script, modify it manually and load it back
> into the correct rc.path (so that it starts automatically at boot time)
> or import it back into guarddog.



Thank you very much, that's really usefull and good to know its not just me 
with this kind of problem :)

I played around with IPTABLES a couple of years ago writting really simple 
firewalls.

Because of this you have given me the impetus to dust off my books and dive 
into it at a low level again.

Thanks for taking the time to answer, you have given me an idea on howto 
proceed ...

Dave



> greetings again
>
> gfwp
>
> Dave S ha scritto:
> > On Tuesday 05 December 2006 14:10, Rolf Pedersen wrote:
> >> Dave S wrote:
> >>> .....
> >>> 'wengo' or 'wengophone' - think of skype but opensource & open
> >>> standards - with video etc
> >>>
> >>> http://openwengo.com/
> >>> .....
> >>
> >> Did you try their forum? http://forum.wengo.com/index.php
> >
> > I did a while ago without any bites, however now I know I need to let the
> > SIP protocol through I might give it another go.
> >
> > Cheers
> >
> > Dave
> >
> >
> > -------------------------------------------------------------------------
> > Take Surveys. Earn Cash. Influence the Future of IT
> > Join SourceForge.net's Techsay panel and you'll get the chance to share
> > your opinions on IT & business topics through brief surveys - and earn
> > cash
> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> > _______________________________________________
> > Guarddog-user mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/guarddog-user

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV