Re: nf_nat_sip & nf_conntrack_sip

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jorge Bastos wrote:
What does "remain alive" mean? If something is not working as expected,
please include a pcap dump of both before and after NAT.

I mean, when the person from the other side disconnects, the call doesn't
end.

/sbin/modprobe nf_nat_sip
/sbin/modprobe nf_conntrack_sip sip_direct_signalling=0
sip_direct_media=0
This does not work, the nat module already pulls in the conntrack module
without parameters.

ops!
Then i've been loading the nat modules in the wrong order, it should be
always:
1- nf_conntrack_??? options
2- nf_nat_???

Yes.

correct?
I've loaded the modules in this order with the parameters and it's working
file now :)

Explain something to me if possible, why is the SIP module need if
everything works without it?

Well, in that case you don't need it obviously :) In case you're using
NAT, I guess you're also using STUN or something similar. This does not
really work reliable with netfilter, although it might appear that way
most of the time.

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux