> >Every night the router's ppp0 goes down and after about a minute up again with >a new IP. But iptables keeps on sending the NATted UDP packets _from_ the old >IP address. `iptables -F` and reloading the rules doesn't help. The only >workaround is to stop asterisk on the NAT client for about 2 minutes. That is how it is. The -t nat table is only consulted for NEW connections. >Why isn't this table deleted when ppp0 goes down? netfilter does not know it has gone down, I think. >How can I force iptables to use ppp0's real IP address as sender IP in >outgoing packets? Flush the conntrack table when ppp0 has gone up (yes, up) Jan Engelhardt --