Re: [BUG] Conntrack SIP Problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Your patch indeed resolves part of the issue, but it is not complete. The problem is that set_expected_rtp in the file net/netfilter/nf_conntrack_sip.c assumes that the source IP-address of the expected RTP audio connection is the same as the source address of the SIP control connection. This is not necessarily the case and prevents RTP connections from getting through the NAT box as the expected connection does not match the attempted connection.

Regards,
Jerome

On Wed, 13 Jun 2007, Herbert Xu wrote:

Jerome Borsboom <j.borsboom@xxxxxxxxxxxx> wrote:
As far as I can see -stable and -rc do not work in the described case. The
problem is that the sdp session that carries the audio stream is NATed
just like the SIP-control stream. This is ok when the SIP server has the
same IP as the server that handles the sdp session, but when the IPs
differ, packets that are destined for the sdp server are sent to the SIP
server instead when going through NAT.

Actually it work because that's exactly what I fixed :)

See below.

Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux