Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 935 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASL routing changes H232 packet content????

tsol2001
Hello

I’m running a ASL 4.014 with 2DMZ Ports ,1 internal and 1 external port.
The Traffic from External to DMZ2 and back  is open.
When I try to establish a H323 connection from outside the connection attempt is a susses, but I can’t establish a data connection. I made some traces with Ethereal and found out that port numbers inside the H323 content are changed when passing the Astaro.(not the TCP ports)

Packet Type: H225.0 CS alerting OpenLogicalChanel
Before Astaro:

H232_massage_body
  AlertingUUIE
    Faststart
      Item0
        openLogicalChannel
          forwardLogicalChannelParameters
            multiplexParameters
               h2250LogicalParameters
                 mediaChannel
                   UnicastAddress_IPAddress

          tsapIdentifier 16428 

After Astaro:

H232_massage_body
  AlertingUUIE
    Faststart
      Item0
        openLogicalChannel
          forwardLogicalChannelParameters
            multiplexParameters
               h2250LogicalParameters
                 mediaChannel
                   UnicastAddress_IPAddress

                            tsapIdentifier 16429 

I wouldn´t belive ASL would touch the the packet content.
Is this a known issue? Any work around?
 


This thread was automatically locked due to age.
Parents
  • 0
    tsol2001,

    hhhmmm, try to unload the h323 modules

    -> rmmod ip_nat_h323

    think that could be the source of error, no success? Try also to remove
    the related connection tracking module

    -> rmmod ip_conntrack_h323

    if it works now you could remove those modules permanently
    from /usr/local/fw/firewall_on.sh

    Greetings
    cyclops  
  • 0 in reply to cyclops
    Thanx fore the tip
    I  remove the ip_nat_h323 and it worked.
    The H323 module seems to be buggy.
      Astaro can you provide us a fix? 
       
Reply Children