|
||||||||
Make sure you have an outbound rule mapping the outbound connection or it also comes from wan address. It is all I can think of at the moment. I am still unpacking, but so far haven't found a copy of that config file. I will look at my m0n0wall tonight and see if I can give you some more specifics. Ethan Joe Perkins wrote: > Yes, I actually did the following: > 1.) Created a 1:1 NAT mapping to my video conferencing unit (with proxy > ARP) > 2.) Created a ruleset allowing all inbound TCP/UDP traffic to the unit > (wide open) > 3.) Used the default LAN to ANY rule for outbound traffic. > > The unit inside the Monowall is a Zydacron 360. I have tried making > connections between that unit and various Polycoms, a Sony PCS1 and an > Aethra. All yielded the same result. It has been a while since I > tested so I am unclear on the result, but I was also unable to get the > Sony PCS1 to work when it was placed behind the Monowall. > > Thanks for the help. > > Joe Perkins > > > -----Original Message----- > From: Ethan Bonick [mailto:ethan at networkinggeeks dot com] > Sent: Thursday, October 26, 2006 8:56 AM > To: m0n0wall > Subject: Re: [m0n0wall] H.323 and video Conferencing > > I tested by calling Polycom and they connected into the our cameras. I > also tested our polycom by connecting to their testing units with no > problems. > > If I recall correctly I had to open a couple of specific ports, and > then a range of ports. I also am assuming you have opened the correct > firewall rules? It did take me about two weeks because of some stupid > little mistake, but it did work. > > I am in the middle of moving next week and getting my file server back > up and running. I will try to find a copy of the working config file and > > let you see what I did. Since it was a while ago I can't really remember > > exactly what I did. It would also be helpful to know which equipment you > > are using and also get a copy of the instructions for them. You can mail > > me off list. > > Ethan > > Joe Perkins wrote: > >> The video conferencing unit behind the Monowall is able to: >> 1.) Send Video and Audio >> 2.) Receive Audio >> >> but the unit cannot receive incoming video. >> >> This is with a 1:1 NAT mapping to the conferencing unit and with all >> ports open. >> >> This problem has been consistent with all types of video conferencing >> equipment from a variety of manufacturers. >> >> I am thinking that the problem arises due to H.323 dynamically >> > assigning > >> ports. (Although I have not tried it, it is possible that two >> > Polycoms > >> connecting to one another would be ok, since they would not negotiate >> > a > >> session using dynamic ports). If so, the problem is similar to >> > passive > >> FTP transfers via a Monowall, meaning that we need a bit of IPfilter >> help??? >> >> Joe Perkins >> >> >> -----Original Message----- >> From: Ethan Bonick [mailto:ethan at networkinggeeks dot com] >> Sent: Sunday, October 22, 2006 8:53 PM >> To: m0n0wall at lists dot m0n0 dot ch >> Subject: Re: [m0n0wall] H.323 and video Conferencing >> >> What kind of problems are you having with H.323? I had monowall >> > working > >> with some video polycom cameras a couple years ago. I never tested the >> > > >> audio but the video was working great. This was the only firewall I >> could find att eh time that supported H.323. >> >> Ethan >> >> Joe Perkins wrote: >> >> >>> Hello, >>> >>> >>> >>> I am wondering if the port to BSD 6 will enable the use of H.323 >>> > video > >>> conferencing. I believe the current problem in supporting H.323 >>> revolves around a lack of support for newer versions of IPfilter, >>> although I am not certain. >>> >>> >>> >>> Joe Perkins >>> >>> >>> >>> >>> >>> >>> >> >> > > > |