[Spce-user] Chain Mediaproxy Iptables

[Marc Storck]

Make that: “that chain is mandatory, regardless of your input policy, if you want to benefit from in-kernel packet forwarding.”

Regards,

Marc


> Hi,
> as Richard said, that chain is mandatory if you want to benefit from in-kernel packet forwarding, which gives you a large boost in performance.
> 
> Daniel
> 
> 
> 
> 
> On 12/05/2014 11:25 AM, Francisco Romero | VOZELIA wrote:
>> Excuse me. I wanted to say "If you have NOT set up reject policy input".
>> 
>> Francisco.
>> 
>> From: "Daniel Grotti" <dgrotti at sipwise.com> <mailto:dgrotti at sipwise.com>
>> To: "Francisco Romero | VOZELIA" <francisco.romero at vozelia.com> <mailto:francisco.romero at vozelia.com>
>> Cc: spce-user at lists.sipwise.com <mailto:spce-user at lists.sipwise.com>
>> Sent: Friday, December 5, 2014 11:16:48 AM
>> Subject: Re: [Spce-user] Chain Mediaproxy Iptables
>> 
>> Hi,
>> what do you mean ?
>> We don't set up reject policy input.
>> 
>> Daniel
>> 
>> 
>> On 12/05/2014 10:58 AM, Francisco Romero | VOZELIA wrote:
>> Thank you Daniel.
>> 
>> Handbook contains:
>> 
>> For each media stream, it opens two pairs of UDP ports on the public interface in the range of 30000 and 40000 per default
>> 
>> I think It's necessary If you have set up reject policy input.
>> 
>> Regards.
>> Francisco
>> 
>> 
>> From: "Daniel Grotti" <dgrotti at sipwise.com> <mailto:dgrotti at sipwise.com>
>> To: spce-user at lists.sipwise.com <mailto:spce-user at lists.sipwise.com>
>> Sent: Friday, December 5, 2014 10:32:29 AM
>> Subject: Re: [Spce-user] Chain Mediaproxy Iptables
>> 
>> Hi,
>> yes, it's really necessary.
>> Please read the handbook:
>> https://www.sipwise.com/doc/mr3.6.1/spce/ar01s02.html#_media_relay <https://www.sipwise.com/doc/mr3.6.1/spce/ar01s02.html#_media_relay>
>> 
>> 
>> Daniel
>> 
>> 
>> 
>> On 12/05/2014 10:25 AM, Francisco Romero | VOZELIA wrote:
>> Hi list,
>> 
>> I have noticed there is a chain from mediaproxy and a reference in input chain:
>> 
>> Chain INPUT (policy ACCEPT)
>> target prot opt source destination
>> mediaproxy all -- 0.0.0.0/0 0.0.0.0/0
>> 
>> Chain FORWARD (policy ACCEPT)
>> target prot opt source destination
>> 
>> Chain OUTPUT (policy ACCEPT)
>> target prot opt source destination
>> 
>> Chain mediaproxy (1 references)
>> target prot opt source destination
>> 
>> It is necessary for something or could I delete it?
>> 
>> Regards.
>> Francisco
>> 
>> 
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com <mailto:Spce-user at lists.sipwise.com>
>> https://lists.sipwise.com/listinfo/spce-user <https://lists.sipwise.com/listinfo/spce-user>
>> 
>> 
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com <mailto:Spce-user at lists.sipwise.com>
>> https://lists.sipwise.com/listinfo/spce-user <https://lists.sipwise.com/listinfo/spce-user>
>> 
>> 
>> 
> 
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20141205/07906777/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20141205/07906777/attachment-0001.asc>