TELES CellX 3G-4, System Manual

Page: 33 / 64

4 Configuration
Page 33 CELLX box 17.1/002
Example 4.6 shows in addition to the examples before the settings for a default gateway on
192.168.1.1, and active NAT masquerading for the internal network 192.168.1.0/24.
The firewall blocks all incoming traffic on eth2. The exception on eth2 is icmp (for Ping re-
quests) and TCP traffic on port 4445 (for the GATE Manager) from the same subnet
(172.20.0.0/16).
For eth1 are no firewall settings defined – all traffic is allowed.
4.6.3 The route.cfg config file
The CELLX Box’s routing information is saved in the
route.cfg
file. Routing describes call
processing within the CELLX Box. The routing configuration is the basis for deciding on which
interface (FXS, IP, GSM) an incoming call is sent out. The
route.cfg
contains the sections
summarized in Table 4.4 .
Example 4.6 Complete ip.cfg with default gateway and NAT
[System]
DefaultGW=192.168.1.1
[eth1]
IpAddress=192.168.1.224 netmask 255.255.0.0
[eth2]
IpAddress=172.20.27.224 netmask 255.255.255.0
[iptables]
iptables -t nat -A POSTROUTING -o eth2 -s 192.168.1.0/24 -j MASQUERADE
iptables -P INPUT -j DROP
iptables -P FORWARD -j DROP
iptables -P OUTPUT ACCEPT
iptables -A INPUT -s 172.20/16 -p tcp --dport 4445 -i eth2 -j ACCEPT
iptables -A INPUT -s 172.20/16 -p icmp -i eth2 -j ACCEPT
iptables -N block
iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A block -m state --state NEW -i ! eth2 -j ACCEPT
iptables -A block -m limit -j LOG
iptables -A block -j DROP
iptables -A INPUT -j block
iptables -A FORWARD -j block
[dnsmasq]
bogus-priv
filterwin2k
user=root
interface=eth1
domain=teles
dhcp-range=192.168.1.50,192.168.1.90,12h
cache-size=150
resolv-file=/etc/resolv.conf
Table 4.4 Sections in the route.cfg file
Section Function
[System]
Contains all routing entries (MapAll, Restrict, Redirect) of the default con-
figuration.
[VoIP:<name>]
Contains all settings necessary for communication with the VoIP peer.
[Registrar:<name>]
Contains all settings to register with the registrar.