H323 Maquerading Patch fuer SuSE80 and SuSE8.1
(Kernel also works with SuSE 7.3 and newer)

English text below

Die Originaldokumentation dazu findet sich unter: http://www.hildenhagen.de/netmeeting.htm
(Auch zu finden bei Hubertus Sandmann)

Worum geht es hier?

Um Videokonferenzen mit einer Software wie NetMeeting über einen Linux-Firewall zu nutzen ist eine spezieller Kernelpatch notwendig. (Stand 26.08.2002)
Der Grund dafür ist das H.323 Protokoll, das ähnlich wie FTP mit zusätzlichen Kommunikationskanälen arbeitet, die bei Bedarf geöffnet werden.

Eine vollständige Anleitung finden Sie unter der obigen URL. Ich möchte an dieser Stelle lediglich einen Patch beitragen, der auf SuSE 8.0 portiert wurde. Dadurch kann der Original SuSE-Kernel (2.4.18.SuSE) gepatcht werden und der Download eines "Vanilla-Kernels" entfällt. Für Hinweise auf eventuelle Fehler und Verbesserungsvorschläge bin ich jederzeit dankbar.

Hier ist der Patch: newnat13-and-helpers-2.4.18_SuSE80.gz
SuSE 8.1:newnat16_helpers-2.4.19_SuSE81.patch.gz

Nur SuSE81: Der Patch ist auf den aktualisierten Kernel angepasst: ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/kernel-source-2.4.19.SuSE-115.i586.rpm

---

English version:

H323 Maquerading Patch for SuSE80 and SuSE81

David Hildenhagen describes a Patch for Linux, which enables Masquerading of H.323-Connection thru a Linux-Gateway:

http://www.hildenhagen.de/netmeeting.htm
Original patch can be found here:http://www.roeder.goe.net/~koepi/newnat.html

I would like to provide a special version of the described patch, which had been ported to SuSE Linux 8.0 and 8.1.
With this patch you can continue to use your familiar SuSE kernel. The download of a "vanilla kernel" is not necessary then.

Here is my patch: newnat13-and-helpers-2.4.18_SuSE80.gz
SuSE 8.1:newnat16_helpers-2.4.19_SuSE81.patch.gz

The 8.1-Patch should be used only with this kernel (which works on older linuxes also): ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/kernel-source-2.4.19.SuSE-115.i586.rpm

Please use David's description for complete reference.
Here are some additional comments:

• After patching the kernel, you have to say:
  make mrproper; make oldconfig
  as root in /usr/src/linux.
• You have to answer "m" to the question about H.323-NAT. Also activate GRE and PPTP. (if asked. Thanks to Voss)
• After that, do
  make dep; make bzImage; make modules; make modules_install
• Only few hours later :-) copy the new kernel:
  cp arch/i386/boot/bzImage /boot/bzImage.newnat
• You will need a new initrd: type
  mk_initrd -k bzImage.newnat -i initrd.newnat
  Then make a new lilo entry whith this kernel and initrd.
• You have to add modprobe ip_conntrack_h323 to your firewall scripts
• Don't forget to update your iptables-package (YOU HAVE TO COMPILE AFTER KERNEL!): Easiest way: (everything as root)
  • Get the Source RPM of iptables 1.2.7a (included on CD in 8.1): iptables-1.2.7a-17.src.rpm
  • Make the package with
    rpm --target i586 --rebuild iptables-1.2.7a-17.src.rpm
  • After that you find the new RPM in /usr/src/packages/RPMS/i586. Install it with rpm -Uhv /usr/src/packages/RPMS/i585/iptables-1.2.7a-17.i585.rpm.
• Some people have problems with binary-only versions of kernel modules. This is caused by a new release number of the patched kernel. The version checking prevents loading these modules (see /var/log/messages)
  In this case you can copy the modules form the original kernel and add these lines to the end of /etc/modules.conf:
  

  # For Test-Kernel 
  #  (you have to find and copy the modules from a compatible kernel)
  if `uname -r` == "2.4.18-Newnat13+Helpers-4GB"
    # NVidia Video Cards
    install NVdriver      /sbin/insmod "-f" "NVdriver"
    # Fritz card PCI (CAPI)
    install fcpci         /sbin/insmod "-f" "fcpci"
    # Example for Sound system (has to be customized)
    install snd-cmipci    /sbin/insmod "-f" "snd-cmipci"
    install snd           /sbin/insmod "-f" "snd"
    install snd-seq-device /sbin/insmod "-f" "snd-seq-device"
    install snd-rawmidi   /sbin/insmod "-f" "snd-rawmidi"
    install snd-mpu401-uart /sbin/insmod "-f" "snd-mpu401-uart"
    install snd-timer     /sbin/insmod "-f" "snd-timer"
    install snd-hwdep     /sbin/insmod "-f" "snd-hwdep"
    install snd-opl3-lib  /sbin/insmod "-f" "snd-opl3-lib"
    install snd-pcm       /sbin/insmod "-f" "snd-pcm"
  endif