Joerg Dorchain wrote:
Hello, I have some problems understanding nf_conntrack_sip. I want to use it avoid having static entries for the rtp stream, as IMHO those should be catched by a RELATED rules when nf_conntrack_sip works properly. I have a machine with a pppoe interface connected to the internet, with asterisk running on it, and a small local network behind it on eth1, where I want to force sip traffic going through the local asterisk. Unfortunately it doesn't work as expected. I use vanilla kernel 2.6.30. My iptable rules that do not work look like this: Maybe I am missing something obvious, but I'd appreciate a hint. (yes, nf_conntrack_sip is loaded)
Depending on how your SIP provider works, you might need to set the sip_direct_signalling option to zero (in case signalling connections can arrive from different addresses than the one registered with), additionally you might need to set the sip_direct_media option to 0 in case the RTP streams arrive from different addresses than the signalling endpoint. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
