You are right, indeed I have just tested and that doesn't work, it's just to follow traffic bound to sip. I thus will use your solution which after test goes very well. I wanted just to keep the conntrack "hard compliled" in the kernel but obviously it is not possible. .Sébastien -------- Original Message -------- Subject: Re: Change ip_conntrack_sip default port (27-août-2007 9:52) From: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx> To: svecten@xxxxxxxxx > On Mon, 27 Aug 2007, Sebastien VECTEN wrote: > > > Thank you for your response, the good solution is the helper module to > > change the defaut port. > > > > -m helper --helper sip-5068 in a rule. > > That is absolutely false: that is a *match*, which cannot do whatsoever > with the ports of the helpers. > > The SIP helper supports to specify the ports to listen to: > > # modprobe ip_conntrack_sip ports=5060[,up to 8 ports] > > Best regards, > Jozsef > - > E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx > PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt > Address : KFKI Research Institute for Particle and Nuclear Physics > H-1525 Budapest 114, POB. 49, Hungary > To: netfilter@xxxxxxxxxxxxxxxxxxx Cc: netfilter-failover@xxxxxxxxxxxxxxxxxxx