H323 NAT.

["Carles Xavier Munyoz Baldó" <carles@descom.es>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
I'm having lot of problems with the ip_nat_h323 and ip_conntrack_h323 
netfilter modules.

I have applied the patch-o-matic to the 2.4.19 kernel source and compile it in 
my firewall.
I can load the modules with:
# modprobe ip_nat_h323

I have a h323 VoIP device behind my firewall and another one in the internet. 
When I call from the device behind the NAT-firewall, I can reach the device 
in the Internet. All VoIP data from the device behind the firewall arrives to 
the device in the internet, but all de VoIP data from the device in the 
internet is sent to the private addres of the device behind the firewall, and 
never arrives to it.

It seems that the ip_nat_h323 module is not making its work. It is not 
changing the source IP at the h323 aplication level.

I have seen the next logs in the /var/log/messages file:
Oct 15 17:47:47 fwtemplate kernel: ASSERT: ip_nat_core.c:838 
&ip_conntrack_lock not readlocked
Oct 15 17:47:47 fwtemplate kernel: ASSERT ip_conntrack_core.c:93 
&ip_conntrack_lock_R71150de5 readlocked

I'm using the last iptables version (1.2.7a).

May anyone help me with this ?
Any suggestions ?

Greetings.
- ---
Carles Xavier Munyoz Baldó
carles@descom.es
Descom Consulting
Telf: +34 965861024
Fax: +34 965861024
http://www.descom.es/
- ---
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBPaw86jvYAf7VZNaaEQLZNACgn3lsxB5m17khtlSzfRd+OUpMy4gAn0E+
Or8bWYQESsQnb1QK8EFyaGB9
=yrw1
-----END PGP SIGNATURE-----