From mboxrd@z Thu Jan 1 00:00:00 1970 From: Victor Julien Subject: Re: Patch for H323 connection tracking for kernel 2.6.14 and Panic with SIP tracking Date: Fri, 06 Jan 2006 10:34:42 +0100 Message-ID: <43BE39B2.5020605@nk.nl> References: <43BA605E.3020801@trash.net> <43BD7AF4.2040506@nk.nl> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: To: Netfilter Developers List In-Reply-To: <43BD7AF4.2040506@nk.nl> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Victor Julien wrote: > Patrick McHardy wrote: > >> Moises Silva wrote: >> >>> still getting kernel panic, copy the whole thing is a time consuming >>> task, for now doing nothing, but i have downgraded the kernel to >>> 2.6.13 and at least it does not kernel panics. Some one has a patch >>> for sip connection tracking for kernel-2.6.14?? >> >> >> >> Most likely you need to change >> >> ip_ct_refresh_acct(ct, ctinfo, NULL, sip_timeout * HZ); >> >> to >> >> ip_ct_refresh(ct, *pskb, sip_timeout * HZ); >> >> in net/ipv4/netfilter/ip_conntrack_sip.c. If that doesn't help >> please post the entire oops. >> > > This fix works for me! > > Regards, > Victor > > Hmmm, while it still hasn't crashed on me, i can't get it to operate either. I am using 2.6.15 + pom 20060101 + the above fix. I am trying to get the following setup working: softphone (lan) --- sip proxy on gateway --- sip server (@isp) I have rules to allow port 5060/udp. I expected that by loading ip_conntrack_sip this rule, together with accepting all RELATED traffic, sip conversations would work. If i call a number, i see the following entry appear in /proc/net/ip_conntrack_expect: 176 proto=17 src=217.66.118.164 dst=80.126.xx.xx sport=0 dport=7071 176 proto=17 src=192.168.1.1 dst=192.168.1.2 sport=0 dport=8000 (lan client 192.168.1.2, firewall has 192.168.1.1 and 80.126.xx.xx, sip server is 217.66.118.164). But the connection does not work. I have added the following rule to all chains in all tables (mangle, nat, filter): iptables -t -I 1 -m helper --helper sip to see if the sip match ever gets reached, but all counters remain on 0 all the time. If i do the same for ftp, i can see the counters increase. Does anyone have an idea what is going wrong? Regards, Victor