diff --git a/conf/default_ports.conf b/conf/default_ports.conf index 9d56233..95a06d3 100644 --- a/conf/default_ports.conf +++ b/conf/default_ports.conf @@ -62,6 +62,25 @@ default_jitsi_dovecout_auth_port="$dovecot_external_auth_port" # - Jibri Service # - default_jibri_out_port=5222 +# default_outbound_streaming_tcp_ports +# +# - outbound port 1935/TCP : outbound streaming over RTMP to most +# streaming providers such as YouTube Live, Vimeo or Twitch +# +# - outbound port 1936/TCP : outbound streaming over RTMP to LinkedIn +# Live (port 1935 is also used for RTMP streaming to LinkedIn) +# +# - outbound ports 2935/TCP and 2396/TCP : outbound streaming over +# RTMPS to LinkedIn Live +# +# - outbound port 443/TCP (HTTPS) : used for authentication with the +# built-in providers such as YouTube Live, Facebook Live, Ustream, +# Livestream, and Twitch +# +# - outbound port 53/UDP (DNS) used for DNS lookups converting +# hostnames to IP addresses +# +default_outbound_streaming_tcp_ports="1935,1936,2935,2396" # - TURN Server (Stun Server) (for Nextcloud 'talk' app) diff --git a/ip6t-firewall-server b/ip6t-firewall-server index b0cf0d3..2cc7018 100755 --- a/ip6t-firewall-server +++ b/ip6t-firewall-server @@ -1866,6 +1866,7 @@ if [[ ${#jibri_server_ip_arr[@]} -gt 0 ]] || [[ ${#forward_jibri_server_ip_arr[@ for _ip in ${jibri_server_ip_arr[@]} ; do $ip6t -A OUTPUT -p tcp -s $_ip -d $jibri_remote_jitsi_server --dport $jibri_remote_auth_port -m state --state NEW -j ACCEPT $ip6t -A OUTPUT -p udp -s $_ip -d $jibri_remote_jitsi_server -m multiport --dports $standard_jitsi_udp_port_range -m state --state NEW -j ACCEPT + $ip6t -A OUTPUT -p udp -s $_ip -m multiport --dports $default_outbound_streaming_tcp_ports -m state --state NEW -j ACCEPT done fi @@ -1873,6 +1874,7 @@ if [[ ${#jibri_server_ip_arr[@]} -gt 0 ]] || [[ ${#forward_jibri_server_ip_arr[@ for _ip in ${forward_jibri_server_ip_arr[@]} ; do $ip6t -A FORWARD -p tcp -s $_ip -d $jibri_remote_jitsi_server --dport $jibri_remote_auth_port -m state --state NEW -j ACCEPT $ip6t -A FORWARD -p udp -s $_ip -d $jibri_remote_jitsi_server -m multiport --dports $standard_jitsi_udp_port_range -m state --state NEW -j ACCEPT + $ip6t -A FORWARD -p udp -s $_ip -m multiport --dports $default_outbound_streaming_tcp_ports -m state --state NEW -j ACCEPT done fi diff --git a/ipt-firewall-server b/ipt-firewall-server index 869a0f1..7d13637 100755 --- a/ipt-firewall-server +++ b/ipt-firewall-server @@ -2112,6 +2112,7 @@ if [[ ${#jibri_server_ip_arr[@]} -gt 0 ]] || [[ ${#forward_jibri_server_ip_arr[@ for _ip in ${jibri_server_ip_arr[@]} ; do $ipt -A OUTPUT -p tcp -s $_ip -d $jibri_remote_jitsi_server --dport $jibri_remote_auth_port -m state --state NEW -j ACCEPT $ipt -A OUTPUT -p udp -s $_ip -d $jibri_remote_jitsi_server -m multiport --dports $standard_jitsi_udp_port_range -m state --state NEW -j ACCEPT + $ipt -A OUTPUT -p tcp -s $_ip -m multiport --dports $default_outbound_streaming_tcp_ports -m state --state NEW -j ACCEPT done fi @@ -2119,6 +2120,7 @@ if [[ ${#jibri_server_ip_arr[@]} -gt 0 ]] || [[ ${#forward_jibri_server_ip_arr[@ for _ip in ${forward_jibri_server_ip_arr[@]} ; do $ipt -A FORWARD -p tcp -d $jibri_remote_jitsi_server --dport $jibri_remote_auth_port -m state --state NEW -j ACCEPT $ipt -A FORWARD -p udp -s $_ip -d $jibri_remote_jitsi_server -m multiport --dports $standard_jitsi_udp_port_range -m state --state NEW -j ACCEPT + $ipt -A FORWARD -p tcp -s $_ip -m multiport --dports $default_outbound_streaming_tcp_ports -m state --state NEW -j ACCEPT done fi