Re: [Partysip-dev] iptables server

[Aymeric Moizard]

On Tue, 20 May 2003, Matthias Rieber wrote:

> Hi,
>
> i'm playing with the experimental nat/iptables support. It seems to be
> working but the iptables server is very unstable on my server.

Mine too! and as I'm not using it, I did not tried to debug
the "iptables" code. This utility has not been done to insert
more than one rule at a time...

> I'm not sure what the iptables server is doing excactly, but I
> replaced it with the attached bash script, which just inserts or
> deletes the iptable rule on partysips demand.  (it's a bit modified
> for my firewall, which needs an additional rule to work).

great, I'll take a look at this.

I would like to change the commands sent by partysip so that it will
remain independant from the firewall and rules you have. The script will
decide it. Commands sent by partysip would look like:

forward_rtp_stream: $incoming_port $destination_ip $destination_port

and later:

stop_rtp_stream: $incoming_port $destination_ip $destination_port

Can you update your script for such commands? (I'm not a script maker :)

> The only problem is that the nat rule won't be removed when the
> connection is not properly established. Is that a know issue or last it
> VERY long?

It should, but as i didn't test much, it's obvious that many bugs
still exists...

Thanks for your script.
Aymeric

>
> matthias