firewall: Add H.323 to the conntrack helpers

This commit is contained in:
Michael Tremer
2015-05-12 13:33:08 +02:00
parent 50354ffe3a
commit c8f8bf328f
2 changed files with 13 additions and 1 deletions

View File

@@ -105,6 +105,18 @@ iptables_init() {
done
fi
# H.323
if [ "${CONNTRACK_H323}" = "on" ]; then
iptables -A CONNTRACK -m conntrack --ctstate RELATED \
-m helper --helper h323 -j ACCEPT
# Gatekeeper RAS
iptables -t raw -A CONNTRACK -p udp --dport 1719 -j CT --helper h323
# Q.931
iptables -t raw -A CONNTRACK -p tcp --dport 1720 -j CT --helper h323
fi
# FTP
if [ "${CONNTRACK_FTP}" = "on" ]; then
iptables -A CONNTRACK -m conntrack --ctstate RELATED \