<html><body><div style="font-family: times new roman,new york,times,serif; font-size: 12pt; color: #000000"><div>Okey. Thank everybody for all.<br></div><div><br></div><div>Regards.</div><div>Francisco<span style="font-weight: bold; color: rgb(85, 85, 85); font-family: 'Trebuchet MS', Arial, Helvetica, sans-serif; font-size: 11px; line-height: 14px; white-space: nowrap; background-color: rgb(253, 253, 253);"></span></div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Marc Storck" <mstorck@voipgate.com><br><b>To: </b>"<spce-user@lists.sipwise.com>" <spce-user@lists.sipwise.com><br><b>Sent: </b>Friday, December 5, 2014 11:36:53 AM<br><b>Subject: </b>Re: [Spce-user] Chain Mediaproxy Iptables<br><div><br></div><div>Make that: “that chain is mandatory, regardless of your input policy, if you want to benefit from in-kernel packet forwarding.”</div><div><br class=""></div><div>Regards,</div><div><br class=""></div><div>Marc</div><div><div><br class=""></div><br class=""><blockquote class=""><div class="">
<div class="">
<div class="moz-cite-prefix">Hi,<br class="">
as Richard said, that chain is mandatory if you want to benefit
from in-kernel packet forwarding, which gives you a large boost in
performance.
<br class="">
<br class="">
Daniel<br class="">
<br class="">
<br class="">
<br class="">
<br class="">
On 12/05/2014 11:25 AM, Francisco Romero | VOZELIA wrote:<br class="">
</div>
<blockquote cite="mid:900726721.2244329.1417775116952.JavaMail.zimbra@vozelia.com" class="">
<div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;" class="">
<div class="">Excuse me. I wanted to say "If you have NOT set up reject
policy input".</div>
<div class=""><br class="">
</div>
<div class="">Francisco.</div>
<div class=""><br class="">
</div>
<hr id="zwchr" class="">
<div style="font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica, Arial, sans-serif; font-size: 12pt;" class=""><b class="">From:
</b>"Daniel Grotti" <a class="moz-txt-link-rfc2396E" href="mailto:dgrotti@sipwise.com" target="_blank"><dgrotti@sipwise.com></a><br class="">
<b class="">To: </b>"Francisco Romero | VOZELIA"
<a class="moz-txt-link-rfc2396E" href="mailto:francisco.romero@vozelia.com" target="_blank"><francisco.romero@vozelia.com></a><br class="">
<b class="">Cc: </b><a class="moz-txt-link-abbreviated" href="mailto:spce-user@lists.sipwise.com" target="_blank">spce-user@lists.sipwise.com</a><br class="">
<b class="">Sent: </b>Friday, December 5, 2014 11:16:48 AM<br class="">
<b class="">Subject: </b>Re: [Spce-user] Chain Mediaproxy Iptables<br class="">
<div class=""><br class="">
</div>
<div class="moz-cite-prefix">Hi,<br class="">
what do you mean ?<br class="">
We don't set up reject policy input.<br class="">
<br class="">
Daniel<br class="">
<br class="">
<br class="">
On 12/05/2014 10:58 AM, Francisco Romero | VOZELIA wrote:<br class="">
</div>
<blockquote cite="mid:804762304.2243259.1417773509457.JavaMail.zimbra@vozelia.com" class="">
<div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;" class="">
<div class="">Thank you Daniel.</div>
<div class=""><br class="">
</div>
<div class="">Handbook contains:</div>
<div class=""><br class="">
</div>
<div class=""><em class=""><span style="font-family: verdana, helvetica,
arial, sans-serif; line-height:
24.607999801635742px;" class="">For each media stream, it
opens two pairs of UDP ports on the public interface
in the range of 30000 and 40000 per default</span></em></div>
<div class=""><em class=""><span style="font-family: verdana, helvetica,
arial, sans-serif; line-height:
24.607999801635742px;" class=""><br class="">
</span></em><span style="font-family: verdana,
helvetica, arial, sans-serif; line-height:
24.607999801635742px;" class="">I think It's necessary If you
have set up reject policy input.</span></div>
<div class=""><br class="">
</div>
<div class="">Regards.</div>
<div class="">Francisco</div>
<div class=""><em class=""><span style="font-family: verdana, helvetica,
arial, sans-serif; line-height:
24.607999801635742px;" class=""><br class="">
</span></em></div>
<div class=""><b style="font-family: Helvetica, Arial, sans-serif;
font-size: 12pt;" class=""><br class="">
</b></div>
<div class=""><b style="font-family: Helvetica, Arial, sans-serif;
font-size: 12pt;" class="">From: </b><span style="font-family:
Helvetica, Arial, sans-serif; font-size: 12pt;" class="">"Daniel
Grotti" <a class="moz-txt-link-rfc2396E" href="mailto:dgrotti@sipwise.com" target="_blank"><dgrotti@sipwise.com></a></span></div>
<div style="font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica, Arial, sans-serif; font-size: 12pt;" class=""><b class="">To:
</b><a class="moz-txt-link-abbreviated" href="mailto:spce-user@lists.sipwise.com" target="_blank">spce-user@lists.sipwise.com</a><br class="">
<b class="">Sent: </b>Friday, December 5, 2014 10:32:29 AM<br class="">
<b class="">Subject: </b>Re: [Spce-user] Chain Mediaproxy
Iptables<br class="">
<div class=""><br class="">
</div>
<div class="moz-cite-prefix">Hi,<br class="">
yes, it's really necessary.<br class="">
Please read the handbook: <br class="">
<a class="moz-txt-link-freetext" href="https://www.sipwise.com/doc/mr3.6.1/spce/ar01s02.html#_media_relay" target="_blank">https://www.sipwise.com/doc/mr3.6.1/spce/ar01s02.html#_media_relay</a><br class="">
<span style="font-family: sans-serif;" class=""><br class="">
<br class="">
Daniel<br class="">
<br class="">
<br class="">
<br class="">
On 12/05/2014 10:25 AM, Francisco Romero | VOZELIA
wrote:<br class="">
</span></div>
<blockquote cite="mid:512253914.2240437.1417771555773.JavaMail.zimbra@vozelia.com" class="">
<div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;" class="">
<div class="">Hi list,</div>
<div class=""><br class="">
</div>
<div class="">I have noticed there is a chain from mediaproxy
and a reference in input chain:</div>
<div class=""><br class="">
</div>
<div class=""><div style="margin: 0px;" class=""><em class="">Chain INPUT (policy
ACCEPT)</em><br class="">
<em class="">target prot opt source destination </em><br class="">
<em class="">mediaproxy all -- 0.0.0.0/0 0.0.0.0/0</em></div><div style="margin: 0px;" class=""><br class="">
</div><div style="margin: 0px;" class=""><em class="">Chain FORWARD (policy
ACCEPT)</em><br class="">
<em class="">target prot opt source destination</em></div><div style="margin: 0px;" class=""><br class="">
</div><div style="margin: 0px;" class=""><em class="">Chain OUTPUT (policy
ACCEPT)</em><br class="">
<em class="">target prot opt source destination</em></div><div style="margin: 0px;" class=""><br class="">
</div><div style="margin: 0px;" class=""><em class="">Chain mediaproxy (1
references)</em><br class="">
<em class="">target prot opt source destination</em></div><div style="margin: 0px;" class=""><br class="">
</div><div style="margin: 0px;" class="">It is necessary for
something or could I delete it?</div><div style="margin: 0px;" class=""><br class="">
</div><div style="margin: 0px;" class="">Regards.</div><div style="margin: 0px;" class="">Francisco</div>
</div>
</div>
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br class="">
<pre class="">_______________________________________________
Spce-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Spce-user@lists.sipwise.com" target="_blank">Spce-user@lists.sipwise.com</a>
<a class="moz-txt-link-freetext" href="https://lists.sipwise.com/listinfo/spce-user" target="_blank">https://lists.sipwise.com/listinfo/spce-user</a>
</pre>
</blockquote>
<br class="">
<br class="">
_______________________________________________<br class="">
Spce-user mailing list<br class="">
<a class="moz-txt-link-abbreviated" href="mailto:Spce-user@lists.sipwise.com" target="_blank">Spce-user@lists.sipwise.com</a><br class="">
<a class="moz-txt-link-freetext" href="https://lists.sipwise.com/listinfo/spce-user" target="_blank">https://lists.sipwise.com/listinfo/spce-user</a><br class="">
</div>
<div class=""><br class="">
</div>
</div>
</blockquote>
<br class="">
</div>
<div class=""><br class="">
</div>
</div>
</blockquote>
<br class="">
</div>
_______________________________________________<br class="">Spce-user mailing list<br class=""><a href="mailto:Spce-user@lists.sipwise.com" class="" target="_blank">Spce-user@lists.sipwise.com</a><br class="">https://lists.sipwise.com/listinfo/spce-user<br class=""></div></blockquote></div><br class=""><br>_______________________________________________<br>Spce-user mailing list<br>Spce-user@lists.sipwise.com<br>https://lists.sipwise.com/listinfo/spce-user<br></div><div><br></div></div></body></html>