Hello list, I'm using iptables v1.2.11 on Debian Sarge kernel 2.6.8-3-k7. This router does masquerading for my NAT clients. One of them is an Asterisk server communicating over UDP port 5060 (SIP) with external SIP provider. Every night the router's ppp0 goes down and after about a minute up again with a new IP. But iptables keeps on sending the NATted UDP packets _from_ the old IP address. `iptables -F` and reloading the rules doesn't help. The only workaround is to stop asterisk on the NAT client for about 2 minutes. I found out that there are still entrys in /proc/net/ip_conntrack containing yestrerday's external IP address. Why isn't this table deleted when ppp0 goes down? How can I force iptables to use ppp0's real IP address as sender IP in outgoing packets? Thanks Daniel
