Re: nf_conntrack_sip problem

[Patrick McHardy <kaber@trash.net>]

Joerg Dorchain wrote:
> Hello,
> 
> I have some problems understanding nf_conntrack_sip. I want to
> use it avoid having static entries for the rtp stream, as IMHO
> those should be catched by a RELATED rules when nf_conntrack_sip
> works properly.
> 
> I have a machine with a pppoe interface connected to the
> internet, with asterisk running on it, and a small local network
> behind it on eth1, where I want to force sip traffic going
> through the local asterisk.
> 
> Unfortunately it doesn't work as expected. I use vanilla kernel
> 2.6.30. My iptable rules that do not work look like this:
> 
> Maybe I am missing something obvious, but I'd appreciate a hint.
> (yes, nf_conntrack_sip is loaded)

Depending on how your SIP provider works, you might need to set the
sip_direct_signalling option to zero (in case signalling connections
can arrive from different addresses than the one registered with),
additionally you might need to set the sip_direct_media option to
0 in case the RTP streams arrive from different addresses than the
signalling endpoint.