All of lore.kernel.org
 help / color / mirror / Atom feed
From: Lorenzo Allegrucci <lorenzo.allegrucci@forinicom.it>
To: rebeca.martinez-garcia@estudiant.upc.edu
Cc: netfilter@vger.kernel.org, vhuertas@indra.es
Subject: Re: SIP vs NAT, the configuration
Date: Thu, 17 Dec 2009 13:06:41 +0100	[thread overview]
Message-ID: <4B2A1ED1.5030609@forinicom.it> (raw)

François Legal wrote:
 > I guess yes, but most of the packets will go through the RELATED match,
 > and depending on your setup, a lot of packets not related at all to
 > SIP/VOIP could go through that match.

my setup:

no NAT, static routing, my soft-phones can call each other without problems.
(I configured a local asterisk server just for this test)

on my router (debian lenny):
nf_conntrack_sip ports=5060 sip_direct_signalling=1 sip_direct_media=1
iptables -t mangle -A FORWARD -m helper --helper sip -j CLASSIFY --set-class 1:100

iptables -L -n -t mangle -v -x does not match all voip traffic, just some random packets.
Can anyone reproduce this?

             reply	other threads:[~2009-12-17 12:06 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-12-17 12:06 Lorenzo Allegrucci [this message]
     [not found] ` <07b3b533f982b9d160870cba61241e91@thom.fr.eu.org>
2009-12-18 14:31   ` SIP vs NAT, the configuration Lorenzo Allegrucci
  -- strict thread matches above, loose matches on Subject: below --
2009-12-17 11:02 rebeca.martinez-garcia
2009-12-17 11:45 ` Lorenzo Allegrucci

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4B2A1ED1.5030609@forinicom.it \
    --to=lorenzo.allegrucci@forinicom.it \
    --cc=netfilter@vger.kernel.org \
    --cc=rebeca.martinez-garcia@estudiant.upc.edu \
    --cc=vhuertas@indra.es \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.