Re: [hylafax-users] Can't connect outside LAN to hylafax

[Tomas Novosad <kbbl@xxxxxxxx>]

Hello,

did i understand it wright 
when you do
> > /usr2/tmp> faxstat -s -h 12.9.192. 77
> >
> > nothing here

it just hangs?

I had the same problem - because of firewall

We had a opened port 4559 (hylafax) in firewall, but HYLAFAX protocol is like FTP - it uses FTP's PORT command to establish
new data connection.
Faxstat logs into hylafax (since you do not need password) and then open data connection on different port - but this is blocked by
firewall.
You can have a look with tcpdump on both sides.
We're now using ftp conntrack module for firewall
by lodaing this modules:

modprobe ip_conntrack_ftp ports=21,4559
modprobe ip_nat_ftp

with this, ftp conntrack watches also a hylafax port, so the new data connection is allowed by firewal.

Hope this is what you were asking for.

Tomas


------------ Původní zpráva ------------
Od: Enrique Arredondo <henry@xxxxxxxxxx>
Předmět: Re: [hylafax-users] Can't connect outside LAN to hylafax
Datum: 23.9.2008 18:36:03
----------------------------------------


Jean-Pierre Radley wrote:
> Enrique Arredondo typed (on Tue, Sep 23, 2008 at 08:38:04AM -0700):
>   
> > Hi,
> >
> > What setting should I look for so that hylafax let's me check status and  
> > sendfaxes outside my LAN ?
> > My hosts.hfaxd file has the public IP address as well the LAN spool:
> >
> > localhost
> > 127.0.0.1
> > 192.168.2.*
> > 10.10.10.*
> >
> > faxstat works fine when access from LAN:
> >
> > /usr/local> faxstat -s -h 192.168.2.90
> > HylaFAX scheduler on atkred.com: Running
> > Modem ttyACM0 (+1.714.850.9079): Running and idle
> > Modem ttyACM1 (+1.714.641.5931): Running and idle
> > Modem ttyS0 (+1.714.850.9079): Running and idle
> >
> >
> > but access from public IP (10.10.10.*) hangs Remote faxstat :
> >
> > /usr2/tmp> faxstat -s -h 12.9.192. 77
> >
> > nothing here
> >
> > If I remove 10.10.10.* from hosts.hfaxd file then I get a password  
> > prompt, but then I don't want that to promtp everytime.
> >
> > If I manually do telnet from a public computer into my server I get  
> > hylafax response:
> >
> > /usr2/tmp> telnet 12.9.192. 77  4559
> > Trying 12.9.192.77...
> > Connected to 12.9.192.77 (12.9.192.77).
> > Escape character is '^]'.
> > 220 atkred.com server (HylaFAX (tm) Version 4.4.4) ready.
> >
> > Any ideas of whats missing ?
> >
> > Thanks
> >     
>
> Why do you associate the adjective "public" with the IP number
> 10.10.10.*?  Addresses of the form 10.*.*.*, like those in 172.16.*.*
> and 192.168.*.*, are unroutable ones, reserved for internal use on
> anyone's LAN.
>
>
>   
My bad, I was just putting a random number and that's what first popup 
in my head, but you're correct by public I mean more like 68.123.*.*



____________________ HylaFAX(tm) Users Mailing List _______________________
 To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
On UNIX: mail -s unsubscribe hylafax-users-request@xxxxxxxxxxx < /dev/null
 *To learn about commercial HylaFAX(tm) support, mail sales@xxxxxxxxx*




____________________ HylaFAX(tm) Users Mailing List _______________________
 To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
On UNIX: mail -s unsubscribe hylafax-users-request@xxxxxxxxxxx < /dev/null
 *To learn about commercial HylaFAX(tm) support, mail sales@xxxxxxxxx*