1832649 Members
3007 Online
110043 Solutions
New Discussion

HP UX streaming gateway

 
Jose Antonio Torres
New Member

HP UX streaming gateway

Hi to all,

I've setup a streaming gateway on our server running HP UX.
IPfilter is allowing all traffic by the moment:
my /etc/opt/ipf/ipf.conf:
pass in all
pass out all

Ipnat is doing it's network address translation:
my /etc/opt/ipf/ipnat.conf:
map lan3 0/0 -> 0/32

I've one encoder that sends and MPEG2 stream through and UDP port range.

I can access web server configurator in the encoder, I also can access FTP server on the encoder and telnet the encoder from the other side of the network.

However video streams are not bypassing our HP UX gateway from one network to another.

Could you recommend me some special tricks for UDP packets, video streaming, anyone facing the same problem?
Thanks to all.
2 REPLIES 2
Steven E. Protter
Exalted Contributor

Re: HP UX streaming gateway

Shalom,

There is a DMZ type filter package on the Core OS media for HP-Ux (At least 11.31 the install I did yesterday).

That might be the ticket if you use HP-UX

Frankly, I'd use a Linux box with Firestarter. Firestarter has an easy to use GUI interface (X only) and can definitely handle this task.

You configuration allowing all traffic is highly dangerous.

I would at least configure ssh/openssh to only permit public key based login so your server does not get hacked, or have its root password constantly locked.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Jose Antonio Torres
New Member

Re: HP UX streaming gateway

Maybe I should be more explicit.
I know it's not a good idea to have all ports opened, but this is only a testing environment and my main problem right now is that video streams in UDP port range are not trespassing HP UX gateway while other services as web, ftp and telnet do.

I need to receive video from the encoder on the other network, and then will be the time to start closing ports.

However, many thanks for your answer.