Sébastien Cramatte wrote:
Hello
I'm search for an howto or any docs to use "nf_conntrack_sip".
I've build a traffic shapper and I want to classify SIP, IAX and RTP
traffic.
First, you probably want to use the version in the current -rc
kernel, which includes lots of bugfixes for proper parsing and
more complicated scenarios involving multiple endpoints.
The module has two parameters you might need to change:
- sip_direct_signalling:expect incoming calls from registrar only
(default 1) (int)
Controls whether incoming calls are only coming from the
host that you REGISTER with, or from anywhere. In the
later case the expectation for incoming calls is created
with a wildcard source. With normal SIP telephony providers
usually not necessary.
- sip_direct_media:Expect Media streams between signalling endpoints
only (default 1) (int)
Same thing for RTP streams. This one you often do have to
set to 0, for example when the SIP providers uses load-
balancing or has agreements with other providers to route
RTP directly between endpoints.
Matching on SIP is simple (-m udp --dport 5060). RTP can
be matched on using "-m helper --helper sip". Using marks
you can use this information for TC classification.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html