Hello,
Jimbo a écrit :
I want to dynamically create DNAT rules for RTP streams (port-mapping for a SIP
proxy).
Why don't you use the netfilter NAT helper module for SIP instead ? It
is designed to handle SIP-related mappings and is available in kernel
versions 2.6.18 and above. Its name is ip_nat_sip or nf_nat_sip.
This works fine when I add a rule before the first packet of the RTP stream hits
the port. But, if the RTP stream begins before the rule is in place, it never
matches.
Because DNAT rules have no effect on already existing "connections".
You could use the 'conntrack' tool (available at the netfilter site) to
delete an existing matching connection entry from the conntrack table,
so the DNAT rule would match the next packet.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
