-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm having lot of problems with the ip_nat_h323 and ip_conntrack_h323=20 netfilter modules. I have applied the patch-o-matic to the 2.4.19 kernel source and compile = it in=20 my firewall. I can load the modules with: # modprobe ip_nat_h323 I have a h323 VoIP device behind my firewall and another one in the inter= net.=20 When I call from the device behind the NAT-firewall, I can reach the devi= ce=20 in the Internet. All VoIP data from the device behind the firewall arrive= s to=20 the device in the internet, but all de VoIP data from the device in the=20 internet is sent to the private addres of the device behind the firewall,= and=20 never arrives to it. It seems that the ip_nat_h323 module is not making its work. It is not=20 changing the source IP at the h323 aplication level. I have seen the next logs in the /var/log/messages file: Oct 15 17:47:47 fwtemplate kernel: ASSERT: ip_nat_core.c:838=20 &ip_conntrack_lock not readlocked Oct 15 17:47:47 fwtemplate kernel: ASSERT ip_conntrack_core.c:93=20 &ip_conntrack_lock_R71150de5 readlocked I'm using the last iptables version (1.2.7a). May anyone help me with this ? Any suggestions ? Greetings. - --- Carles Xavier Munyoz Bald=F3 carles@descom.es Descom Consulting Telf: +34 965861024 Fax: +34 965861024 http://www.descom.es/ - --- -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQA/AwUBPaw86jvYAf7VZNaaEQLZNACgn3lsxB5m17khtlSzfRd+OUpMy4gAn0E+ Or8bWYQESsQnb1QK8EFyaGB9 =3Dyrw1 -----END PGP SIGNATURE-----
