H.323 et noyau 2.4.18
Bonjour,
Je cherche à rajouter la gestion du protocole H.323 (vidéo-conférence,
gnomemeeting, etc...) sur une passerelle qui réalise du masquerading.
Je n'arrive pas à patcher correctement le noyau (voir pièce-jointe),
alors que google me dit que ça marche...
Est-ce que quelqu'un a déjà réalisé la manip ou a une petite idée??
Merci
Émile
--
L'évolution de la pensée pré-situationniste entre l'école hégélienne
et le négativisme de l'infrastructure néo-nietzschéenne a-t-elle,
inconsciemment ou non, influencé la carrière de Raymond Poulidor ?
Pierre Desproges.
Already applied: submitted/2.4.14
submitted/2.4.18
submitted/2.4.4
submitted/ah-esp
submitted/conntrack+nat-helper-unregister
submitted/ip6tables-export-symbols
submitted/ip6t_mac-fix-ipv6
submitted/ip_conntrack_protocol_destroy
submitted/ip_conntrack_protocol_unregister
submitted/ip_nat_irc-srcaddr-fix
submitted/ipqueue-ipv6
submitted/ipt_mac-fix
submitted/ipt_MIRROR-ttl
submitted/ipt_REJECT-checkentry
submitted/ipt_unclean-ecn
submitted/irc-dcc-mask
submitted/mangle5hooks
submitted/module-license
submitted/sackperm
submitted/skb_clone_copy
submitted/tcp-MSS
submitted/TOS-oops-fix
submitted/ulog
pending/conntrack
Testing... 0-newnat13.patch NOT APPLIED (98 rejects out of 100 hunks)
The pending/0-newnat13 patch:
Author: Harald Welte <laforge@gnumonks.org>,
Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Status: Pending for kernel inclusion
Implementation of the new nat API for kernel 2.4.18 and above.
- enables us to have multiple related expectations
(necessarry for H.323, real IRC and PPTP tracking, ...)
- allows expectations to have timeouts
- adds full SACK support to the NAT code (we no longer strip
SACKPERM option out of all SYN patckes for ftp/irc connections)
-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y
Testing patch pending/0-newnat13.patch...
Failed to patch copy of /usr/src/linux
TEST FAILED: patch NOT applied.
Testing... h323-conntrack-nat.patch NOT APPLIED ( 3 missing files)
The extra/h323-conntrack-nat patch:
Author: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Status: Alpha
This adds CONFIG_IP_NF_H323: H.323/netmeeting support module for netfilter
connection tracking and NAT. H.323 uses/relies on the following data streams:
Port Description
389 Internet Locator Server (TCP)
522 User Location Server (TCP)
1503 T.120 Protocol (TCP)
1720 H.323 (H.225 call setup, TCP)
1731 Audio call control (TCP)
Dynamic H.245 call control (TCP)
Dynamic RTCP/RTP streaming (UDP)
The H.323 conntrack/NAT modules support the connection tracking/NATing of
the data streams requested on the dynamic ports. The helpers use the
search/replace hack from the ip_masq_h323.c module for the 2.2 kernel
series.
At the very minimum, H.323/netmeeting (video/audio) is functional by letting
trough the 1720 port and loading these H.323 module(s).
The H.323 conntrack/NAT modules do not support
- H.245 tunnelling
- H.225 RAS (gatekeepers)
-----------------------------------------------------------------
Do you want to apply this patch [N/y/t/f/a/r/b/w/v/q/?] y
Testing patch extra/h323-conntrack-nat.patch...
Placed new Config.in line
Placed new Config.in line
Placed new Configure.help entry
Placed new Makefile line
Could not find place to slot in ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
Could not find place to slot in ip_conntrack.h line
TEST FAILED: patch NOT applied.
Reply to: