Grant Taylor wrote:
On 05/08/08 17:24, sean darcy wrote:
I tried it both ways. FWIW, it works both ways for iax. I showed it
that way because the LOG statement were that way. I've run them all
both ways.
Yeah, but why is iptables not filtering the packet correctly; it's
just a port 5060 udp packet. How can it matter that it's 5060 instead
of 4569?
With out knowing the full scenario, I can't say for sure. Are you
dealing with an on going established connection, thus one that is not
passing through the NAT chain again?
Is it possible that you are dealing with SIP Reinvited traffic that
really has a source of elsewhere?
More things are starting to come in to play.
Some questions that might help answering this:
- Which kernel version are you running?
- What helpers are loaded (both NAT and conntrack)
- How does the entry from /proc/net/nf_conntrack for the
SIP connection look like?
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
