On 05/08/08 17:24, sean darcy wrote:
I tried it both ways. FWIW, it works both ways for iax. I showed it that
way because the LOG statement were that way. I've run them all both ways.
Yeah, but why is iptables not filtering the packet correctly; it's just
a port 5060 udp packet. How can it matter that it's 5060 instead of 4569?
With out knowing the full scenario, I can't say for sure. Are you
dealing with an on going established connection, thus one that is not
passing through the NAT chain again?
Is it possible that you are dealing with SIP Reinvited traffic that
really has a source of elsewhere?
More things are starting to come in to play.
Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
