Re: nf_nat_sip & nf_conntrack_sip

[Patrick McHardy <kaber@xxxxxxxxx>]

Jorge Bastos wrote:
> > What does "remain alive" mean? If something is not working as expected,
> > please include a pcap dump of both before and after NAT.
>
> I mean, when the person from the other side disconnects, the call doesn't
> end.
>
> > > /sbin/modprobe nf_nat_sip
> > > /sbin/modprobe nf_conntrack_sip sip_direct_signalling=0
> > > sip_direct_media=0
> > This does not work, the nat module already pulls in the conntrack module
> > without parameters.
>
> ops!
> Then i've been loading the nat modules in the wrong order, it should be
> always:
> 1- nf_conntrack_??? options
> 2- nf_nat_???

Yes.

> correct?
> I've loaded the modules in this order with the parameters and it's working
> file now :)
>
> Explain something to me if possible, why is the SIP module need if
> everything works without it?

Well, in that case you don't need it obviously :) In case you're using
NAT, I guess you're also using STUN or something similar. This does not
really work reliable with netfilter, although it might appear that way
most of the time.

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html