Op woensdag 24 september 2014 15:38:26 schreef Eliezer Croitoru: > On 09/24/2014 01:16 PM, Maarten Vanraes wrote: > > ok, thanks, > > > > so, this is why streaming/voip stuff will still have issues... > > Yes indeed. > and I Meant conntrack and connmark... > VOIP and STREAMING are beasts!!! > There are modules which analyze them and also recognize them but you > will need to enable them first. > > The issue is not UDP by itself as you understand. > It's a well known issue with multi IP nat machines in ISPS. > In many cases a SIP proxy helps to fix couple things. > I haven't tried it yet but it seems like there are commercial products > that implement these SIP proxy. i've used siproxd before... but it's limited, i could set up an asterisk in between, but that might be overkill and i'm not sure i could intercept it without configuring stuff on the other side... what kind of modules do you know that help conntracking this kind of stuff? and... what about ipv6 and multiple ISPs? (but without natting, but still no bgp or something), won't i still have the same problem? Regards, Maarten -- BA NV IT & Security -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
