This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Video Conferercing H.323 through Astaro

I have got an issue with our video conferencing equipment which is two Falcon IP devices. They are using H.323.

I have two internal networks, 10.5.56.0/24 and 10.5.57.0/24, one network for each department. There is an Astaro 3.2 in front of each of them. They are linked together with an linknet and routing is supposed to be correct (I can post it if needed). For testing issuses I am using any-any-allow rules at both sides.

However, the video equipment is not working correctly. Sometimes I get a sucesseful connection, but mostly i get video transfer one way only, depending of which of the units making the call. The 'caller' does not recieve video..

The kernel log posts something like this (I will post the exact message next time I am at the test-site) :
ip_conntrack: max connections excpected 8 for H.245 -- reusing -- 10.5.56.10 -> 10.5.57.10

Is it possible that the devices might need more than 8 connections?? Is it possible to increase this setting?

-+ lhe +-

This thread was automatically locked due to age.

Parents

0 Simon Shaw over 22 years ago

Have a look at http://www.dialupaudio.com/downloaddualgatekeeper.php

It acts as a H.323 proxy in your DMZ.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Simon Shaw over 22 years ago

Have a look at http://www.dialupaudio.com/downloaddualgatekeeper.php

It acts as a H.323 proxy in your DMZ.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 JimmyM over 22 years ago in reply to Simon Shaw

Also try http://www.cryogenic.net/nmproxy.html for a Linux solution.
Cancel
Vote Up 0 Vote Down

Cancel
0 MJacobs over 22 years ago in reply to JimmyM

From a security stand point, you feel that this software does not compromise Astaro 4? Just checking....... I'm leary about adding anything to the standard build.

-Mike
Cancel
Vote Up 0 Vote Down

Cancel
0 Brian Gorka over 22 years ago in reply to MJacobs

H.323 is a hard protocol to NAT or pass though a firewall.  It was unforutnately designed by telecom people and not network people.

If you haven't already bought the equipment, look into something supporting SIP, it's a newer more firewall friendly protocol.   H.323 IS possible to pass if you aren't natting, but it requires a TON of open ports in both directions.  THis is because H.323 uses dynamic ports.

I've HAD it running in the past, I can take another crack at it if you'd like.
Cancel
Vote Up 0 Vote Down

Cancel