Topic: H.323 Voip in SME 6

[robbie]

I have search through the forum and have not been able to find anything that says anyone has successfully put an h.323 device behind a SME server and had it work. I have seen discussion on h.323 put it seems that no answers have been given. I have also seen discussion of this being why Mitel purchased the SME product, but nothing about how to make it work. If I am wrong, I would appreciate someone posting a link to the discussion.

What I am trying to do is have one IP phone behind the SME server (acting as a NAT router) connect to my office VoIP phone system. I can make this work by using a Linksys router and connecting to the DMZ port, but I can not figure out what I am doing wrong with the SME server/router.

I have tried to install openh323 and opengatekeeper thinking that this might work, but I have been unsuccessful. I have also tried forwarding all the h.323 port to the internal ip address, but that does not seem to work either.

If anyone has been able to get anything like this to work I would appreciate your help.

[duncan]

As far as i am aware it is not supported.

Have a look at this link
http://forums.contribs.org/index.php?topic=6682.msg24049#msg24049

Regards Duncan

[robbie]

Thank you for the post Ducan. I talked to a guy at Mitel and this is possible in there support 6000 server with an addon. This leads me to believe that I should be able to make it work in the unsupported release.

I found the following script on the internet:

#!/bin/sh
# Script to redirect H.323 trafic to one specific IP behind the firewall
 
IPTABLES=/sbin/iptables
OUT_DEV=ppp0
IN_HOST=192.168.11.33
TCP_PORT_RANGE=30000:30010
UDP_PORT_RANGE=5000:5003
TCP_LISTENING_PORT=1720

#$IPTABLES -t nat -A POSTROUTING -o $OUT_DEV -j MASQUERADE
$IPTABLES -t nat -A PREROUTING -i $OUT_DEV -p tcp --dport $TCP_PORT_RANGE -j DNAT --to-dest $IN_HOST
$IPTABLES -t nat -A PREROUTING -i $OUT_DEV -p udp --dport $UDP_PORT_RANGE -j DNAT --to-dest $IN_HOST
$IPTABLES -A FORWARD -p tcp -i $OUT_DEV --dport $TCP_PORT_RANGE -d $IN_HOST -j ACCEPT
$IPTABLES -A FORWARD -p udp -i $OUT_DEV --dport $UDP_PORT_RANGE -d $IN_HOST -j ACCEPT
$IPTABLES -t nat -A PREROUTING -i $OUT_DEV -p tcp --dport $TCP_LISTENING_PORT -j DNAT --to-dest $IN_HOST
$IPTABLES -A FORWARD -p tcp -i

This seems as though it should work, but again I am unsuccessful making it work.

[robbie]

I left the last part off of the script I am trying to use. Here is the correct script.

#!/bin/sh
# Script to redirect H.323 trafic to one specific IP behind the firewall
 
IPTABLES=/sbin/iptables
OUT_DEV=ppp0
IN_HOST=192.168.11.33
TCP_PORT_RANGE=30000:30010
UDP_PORT_RANGE=5000:5003
TCP_LISTENING_PORT=1720

#$IPTABLES -t nat -A POSTROUTING -o $OUT_DEV -j MASQUERADE
$IPTABLES -t nat -A PREROUTING -i $OUT_DEV -p tcp --dport $TCP_PORT_RANGE -j DNAT --to-dest $IN_HOST
$IPTABLES -t nat -A PREROUTING -i $OUT_DEV -p udp --dport $UDP_PORT_RANGE -j DNAT --to-dest $IN_HOST
$IPTABLES -A FORWARD -p tcp -i $OUT_DEV --dport $TCP_PORT_RANGE -d $IN_HOST -j ACCEPT
$IPTABLES -A FORWARD -p udp -i $OUT_DEV --dport $UDP_PORT_RANGE -d $IN_HOST -j ACCEPT
$IPTABLES -t nat -A PREROUTING -i $OUT_DEV -p tcp --dport $TCP_LISTENING_PORT -j DNAT --to-dest $IN_HOST
$IPTABLES -A FORWARD -p tcp -i $OUT_DEV --dport $TCP_LISTENING_PORT -d $IN_HOST -j ACCEPT