From mboxrd@z Thu Jan  1 00:00:00 1970
From: Patrick McHardy <kaber@trash.net>
Subject: Re: connection tracking problem ?
Date: Wed, 15 Apr 2009 13:01:30 +0200
Message-ID: <49E5BE8A.6040409@trash.net>
References: <5c0c5c050904141033w1f66c6d6waa068b937861a20@mail.gmail.com> <5c0c5c050904141054q3700518fu1584bfd97a902239@mail.gmail.com> <alpine.LSU.2.00.0904142024580.21682@fbirervta.pbzchgretzou.qr>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit
Cc: Mekabe Ramein <mrmrmrmr@gmail.com>, netfilter-devel@vger.kernel.org
To: Jan Engelhardt <jengelh@medozas.de>
Return-path: <netfilter-devel-owner@vger.kernel.org>
Received: from stinky.trash.net ([213.144.137.162]:56586 "EHLO
	stinky.trash.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
	with ESMTP id S1751016AbZDOLBj (ORCPT
	<rfc822;netfilter-devel@vger.kernel.org>);
	Wed, 15 Apr 2009 07:01:39 -0400
In-Reply-To: <alpine.LSU.2.00.0904142024580.21682@fbirervta.pbzchgretzou.qr>
Sender: netfilter-devel-owner@vger.kernel.org
List-ID: <netfilter-devel.vger.kernel.org>

Jan Engelhardt wrote:
> On Tuesday 2009-04-14 19:54, Mekabe Ramein wrote:
>> I am using Shorewall on CentOS with kernel 2.6.18-92.1.13.el5.
> [...]
>> After some time, I notice that one or two of the clients are not
>> registered.[...]
>> I found out that when in this condition, if I reset the connection
>> tracking table with "conntrack -F" the clients can get registered
>> because their packets reach Asterisk application.
> 
> Your kernel is over 937 days old, something that is not supported on
> this end normally. If you can reproduce it with the latest 2.6.29.1,
> the better.
> 
> By way, if conntrack -F solves the problem, it would be worthwhile
> to see the conntrack -L entries for the still-active UDP connections.

If the sip helper is loaded, unload it or update to the latest version.