Le dimanche 11 septembre 2005 à 00:04 -0400, Edmundo Carmona a écrit : > I guess you have to look in telephony projects. netfilter is just a > firewall... up to ISO layers 3 or 4 And 5 for some protocols such as FTP or IRC for thoses some other connections are needed (FTP data, IRC DCC), with in protocol parameters negociation. You then have to track the protocol in order to spot thoses connections and be able to conntrack and/or nat the full session. SIP is somehow a protocol of this kind, assuming you want to track all connections implied by an IP phone. So it's not irrelevant for Netfilter to "support" SIP, just like FTP, IRC, and others. BTW, there's a sip-conntrack-nat module in patch-o-matic extra repository. Maybe it can help OP. -- http://sid.rstack.org/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE >> Hi! I'm your friendly neighbourhood signature virus. >> Copy me to your signature file and help me spread!