* nf_nat_sip with CT target
@ 2013-02-13 22:41 Daniel Reurich
2013-02-14 13:05 ` Pablo Neira Ayuso
0 siblings, 1 reply; 4+ messages in thread
From: Daniel Reurich @ 2013-02-13 22:41 UTC (permalink / raw)
To: netfilter
Hi,
I'm having trouble figuring out how to set up nf_nat_sip when using the
CT target for loading nf_conntrack_sip.
The CT target for sip works fine.
What I'm struggling with is finding any documentation that indicates how
to add the fucntion of nf_nat_sip as well.
Do I still need to manually load the nf_nat_sip module or can it be
loaded by the conntrack helper or some similar method?
Thanks and regards,
Daniel
--
Daniel Reurich
Centurion Computer Technology (2005) Ltd.
021 797 722
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: nf_nat_sip with CT target
2013-02-13 22:41 nf_nat_sip with CT target Daniel Reurich
@ 2013-02-14 13:05 ` Pablo Neira Ayuso
2013-02-14 19:08 ` Daniel Reurich
0 siblings, 1 reply; 4+ messages in thread
From: Pablo Neira Ayuso @ 2013-02-14 13:05 UTC (permalink / raw)
To: Daniel Reurich; +Cc: netfilter
On Thu, Feb 14, 2013 at 11:41:58AM +1300, Daniel Reurich wrote:
> Hi,
>
> I'm having trouble figuring out how to set up nf_nat_sip when using
> the CT target for loading nf_conntrack_sip.
>
> The CT target for sip works fine.
>
> What I'm struggling with is finding any documentation that indicates
> how to add the fucntion of nf_nat_sip as well.
>
> Do I still need to manually load the nf_nat_sip module or can it be
> loaded by the conntrack helper or some similar method?
modprobe nf_nat_sip should be enough.
Regards.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: nf_nat_sip with CT target
2013-02-14 13:05 ` Pablo Neira Ayuso
@ 2013-02-14 19:08 ` Daniel Reurich
2013-02-14 23:57 ` Pablo Neira Ayuso
0 siblings, 1 reply; 4+ messages in thread
From: Daniel Reurich @ 2013-02-14 19:08 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter
On 15/02/13 02:05, Pablo Neira Ayuso wrote:
> On Thu, Feb 14, 2013 at 11:41:58AM +1300, Daniel Reurich wrote:
>> Hi,
>>
>> I'm having trouble figuring out how to set up nf_nat_sip when using
>> the CT target for loading nf_conntrack_sip.
>>
>> The CT target for sip works fine.
>>
>> What I'm struggling with is finding any documentation that indicates
>> how to add the fucntion of nf_nat_sip as well.
>>
>> Do I still need to manually load the nf_nat_sip module or can it be
>> loaded by the conntrack helper or some similar method?
>
> modprobe nf_nat_sip should be enough.
>
I was under the impression that manually loading the modules was
deprecated and they should autoload either via using a helper or the CT
target.
Will nf_nat_sip just detect whether a sip connection needs to be NATed
due to it's hitting the standard SNAT rule for that route, or do I need
to create a nat table entry specifically for the sip connection with
some other parameters such as -m helper --helper nat-sip ....
Just loading the nf_nat_sip doesn't seem to be enough.
--
Daniel Reurich
Centurion Computer Technology (2005) Ltd.
021 797 722
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: nf_nat_sip with CT target
2013-02-14 19:08 ` Daniel Reurich
@ 2013-02-14 23:57 ` Pablo Neira Ayuso
0 siblings, 0 replies; 4+ messages in thread
From: Pablo Neira Ayuso @ 2013-02-14 23:57 UTC (permalink / raw)
To: Daniel Reurich; +Cc: netfilter
On Fri, Feb 15, 2013 at 08:08:36AM +1300, Daniel Reurich wrote:
> On 15/02/13 02:05, Pablo Neira Ayuso wrote:
> >On Thu, Feb 14, 2013 at 11:41:58AM +1300, Daniel Reurich wrote:
> >>Hi,
> >>
> >>I'm having trouble figuring out how to set up nf_nat_sip when using
> >>the CT target for loading nf_conntrack_sip.
> >>
> >>The CT target for sip works fine.
> >>
> >>What I'm struggling with is finding any documentation that indicates
> >>how to add the fucntion of nf_nat_sip as well.
> >>
> >>Do I still need to manually load the nf_nat_sip module or can it be
> >>loaded by the conntrack helper or some similar method?
> >
> >modprobe nf_nat_sip should be enough.
>
> I was under the impression that manually loading the modules was
> deprecated and they should autoload either via using a helper or the
> CT target.
The sip modules need to be loaded, no changes in that regard. If you
disable automatic helper assignment, you have to use the CT target.
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2013-02-14 23:57 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-02-13 22:41 nf_nat_sip with CT target Daniel Reurich
2013-02-14 13:05 ` Pablo Neira Ayuso
2013-02-14 19:08 ` Daniel Reurich
2013-02-14 23:57 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox