search for: nf_conntrack_sip

https://bugzilla.netfilter.org/show_bug.cgi?id=661 Phil Oester <netfilter at linuxace.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #10 from Phil Oester <netfilter

Hello, Let me first start by saying Shorewall is awesome, and I use it everywhere from single box firewall, to home network firewall, even to our corporate firewall. I am experiencing a problem getting my home firewall to work with my BroadVoice VoIP connection. I use the Sipura SPA-2100 ATA (Analog Telephone Adapter) that came with my BroadVoice account. This happened when I tried to replace

...xt_time xt_connlimit xt_realm xt_addrtype xt_comment xt_recent xt_policy xt_nat ipt_ULOG ipt_REJECT ipt_MASQUERADE ipt_ECN ipt_CLUSTERIP ipt_ah xt_set ip_set nf_nat _tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp nf_conntrack_pptp nf_ conntrack_proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp xt_tcpmss xt_pkttype xt_owner xt_NFQUEUE xt_NFLOG nfnetlink_log xt_multiport xt_mar k...

...e UDP connections from the called party. This behavious has been replicated with the iptables packages 1.4.4-2ubuntu2, 1.4.4.4-2ubuntu3 and 1.4.10-1ubuntu1 and libnetfilter-conntrack packages 0.0.101-1 and 0.9.1-1 under Ubuntu Maverick (10.10), Natty (11.04) and Oneiric (11.10). I'm using the nf_conntrack_sip and nf_nat_sip helpers. It seems to me that the helpers occasionally miss the SIP/SDP packet coming from the called party proxy containing the called endpoint identifiers (IP and RTP port), consequently the expectations for the outgoing RTP and RTCP (=RTP+1) UDP port flows are not set up by libnet...

...ntrack_proto_udplite,nf_nat,ip6t_MASQUERADE,xt_state,xt_connlimit,nf_nat_h323,nf_nat_ipv4,nf_nat_ipv6,nf_nat_pptp,nf_nat_tftp,xt_conntrack,nf_conntrack_amanda,ipt_CLUSTERIP,nf_conntrack_proto_sctp,nf_conntrack_netlink,ip6table_nat,nf_conntrack_broadcast,xt_connmark,nf_conntrack_ftp,nf_conntrack_irc,nf_conntrack_sip,iptable_nat,nf_conntrack_h32,nf_conntrack_ipv4,nf_conntrack_ipv6,nf_conntrack_pptp,nf_conntrack_sane,nf_conntrack_snmp,nf_conntrack_tftp And I don''t seem to have any issue loading the same connection tracking helper that Shorewall does when checking for h323 support. # iptables -t raw -...

...IRECT ipt_NETMAP ipt_MASQUERADE ipt_ECN ipt_ecn ipt_CLUSTERIP ipt_ah ipt_addrtype xt_set ip_set nf_nat_tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_conntrack_sane nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp nf_conntrack_pptp nf_conntrack_proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp xt_TPROXY nf_tproxy_core nf_defrag_ipv6 xt_tcpmss xt_pkttype xt_physdev xt_owner x...

Hello,   Are there general guidelines around on how to configure Shorewall for use with SIP phones ?  Especially regarding (some?) Cisco SIP phones which are expecting a reply at port 5060 while sending from an arbitrary high port. Thanks ! ------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC,

Hey, we're experiencing a weird problem with Asterisk 1.8.13.1 (1:1.8.13.1~dfsg1-3+deb7). Calls that leave and enter Asterisk via a PBX (sipgate.de) work perfectly fine, almost 100% of the time. However, calls that are routed to sipgate.de, which then routes the call back to our Asterisk instance are "silent" most of the time. What I mean with that is that even though RTP traffic

...t_realm xt_addrtype xt_comment xt_recent ipt_ULOG ipt_MASQUERADE ipt_ECN ipt_CLUSTERIP ipt_ah xt_set nf_nat_tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_conntrack_sane nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp nf_conntrack_pptp nf_conntrack_proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp xt_TPROXY xt_time xt_TCPMSS xt_tcpmss xt_sctp [ 2643.920563] xt_policy xt_pkttype xt_p...

...dma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core fuse iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi bridge stp xt_length xt_mark cls_fw sch_sfq sch_htb iptable_mangle xt_tcpudp xt_conntrack xt_state xt_dscp xt_DSCP xt_CLASSIFY ipt_LOG ipt_REJECT xt_owner nf_nat_ftp nf_conntrack_ftp nf_nat_sip nf_conntrack_sip nf_nat_h323 nf_conntrack_h323 nf_nat_pptp nf_nat_proto_gre nf_conntrack_pptp nf_conntrack_proto_gre nf_nat_irc nf_conntrack_irc iptable_filter iptable_nat ipt_MASQUERADE nf_nat xt_multiport xt_iprange nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack ip_tables x_tables hwmon_vid loop arc4 ath9k ath9k_c...

..._CT xt_LOG xt_connlimit xt_realm xt_addrtype xt_comment xt_recent xt_nat ipt_ULOG ipt_REJECT ipt_MASQUERADE ipt_ECN ipt_ah xt_set ip_set nf_nat_tftp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_conntrack_sane nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp nf_conntrack_pptp nf_conntrack_proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp xt_TPROXY xt_time xt_TCPMSS xt_tcpmss xt_sctp xt_policy xt_pkttype xt_physdev xt_owner...

I have four-interface Shorewall config set up. The "dmz" interface is bridged with "net" so I can assign public IP''s to the servers in the DMZ. I opted to do this rather than SNAT or ARP proxying because one of the servers runs Asterisk and SIP and NAT don''t always work well together. Somehow, my firewall config is causing a one-way audio problem in

...ysfs file: /sys/devices/system/cpu/cpu15/cache/index2/shared_cpu_map > [ 605.110686] CPU 6 > [ 605.110698] Modules linked in: ip6table_filter ip6_tables nf_nat_tftp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda nf_conntrack_amanda nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_sctp nf_conntrack_pptp nf_conntrack_proto_gre nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp xt_physdev xt_hashlimit nfs ib_iser libiscsi scsi_transport_iscsi ib_ucm ib_ipoib rdma_ucm rdma_cm ib_cm iw_cm ib_sa ib_addr ib_uverbs ib...

...rack_sane nf_conntrack_netlink nfnetlink nf_conntrack_irc nf_conntrack_h323 ts_kmp nf_conntrack_amanda nf_conntrack_proto_dccp nf_conntrack_proto_udplite nf_conntrack_pptp nf_conntrack_tftp nf_conntrack_proto_gre nf_conntrack_proto_sctp nf_conntrack_netbios_ns xt_conntrack x_tables nf_conntrack_ftp nf_conntrack_sip nf_conntrack binfmt_misc veth vmnet vmblock vsock vmci vmmon nfsd parport_pc exportfs ppdev nfs joydev bridge lockd stp fscache nfs_acl snd_hda_codec_hdmi auth_rpcgss snd_hda_codec_realtek arc4 sunrpc snd_hda_intel snd_hda_codec snd_hwdep snd_pcm rtl8187 snd_seq_midi i915 snd_rawmidi snd_seq_midi_e...

...; ashmem: initialized > NET: Registered protocol family 26 > Mirror/redirect action on > Simple TC action Loaded > netem: version 1.3 > u32 classifier > Actions configured > nf_conntrack_irc: failed to register helpers > nf_conntrack_sane: failed to register helpers > nf_conntrack_sip: failed to register helpers > xt_time: kernel timezone is -0000 > IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) > IPVS: Connection hash table configured (size=4096, memory=64Kbytes) > IPVS: ipvs loaded. > IPVS: [rr] scheduler registered. > IPVS: [wrr] scheduler registered....

...; ashmem: initialized > NET: Registered protocol family 26 > Mirror/redirect action on > Simple TC action Loaded > netem: version 1.3 > u32 classifier > Actions configured > nf_conntrack_irc: failed to register helpers > nf_conntrack_sane: failed to register helpers > nf_conntrack_sip: failed to register helpers > xt_time: kernel timezone is -0000 > IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) > IPVS: Connection hash table configured (size=4096, memory=64Kbytes) > IPVS: ipvs loaded. > IPVS: [rr] scheduler registered. > IPVS: [wrr] scheduler registered....

...r 25 12:32:45 MSK 2011 x86_64 GNU/Linux .config file attached Modules Loaded binfmt_misc ipt_NETFLOW ts_kmp xt_length ipt_REJECT xt_comment xt_state xt_string iptable_filter iptable_nat ip_tables x_tables ext2 nf_nat_pptp nf_conntrack_pptp nf_conntrack_proto_gre nf_nat_proto_gre nf_nat_sip nf_conntrack_sip nf_nat_ftp nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack_ftp nf_conntrack ipmi_devintf ipmi_si ipmi_msghandler loop tpm_tis pcspkr i2c_i801 evdev joydev tpm psmouse processor button i2c_core serio_raw tpm_bios ext3 jbd mbcache dm_mod sd_mod crc_t10dif usbhid hid ahci libata igb scsi_mod uhci...

...ed protocol family 26 > > Mirror/redirect action on > > Simple TC action Loaded > > netem: version 1.3 > > u32 classifier > > Actions configured > > nf_conntrack_irc: failed to register helpers > > nf_conntrack_sane: failed to register helpers > > nf_conntrack_sip: failed to register helpers > > xt_time: kernel timezone is -0000 > > IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) > > IPVS: Connection hash table configured (size=4096, memory=64Kbytes) > > IPVS: ipvs loaded. > > IPVS: [rr] scheduler registered. > > IPVS...

https://bugs.freedesktop.org/show_bug.cgi?id=108857 Bug ID: 108857 Summary: display becomes unresponsive and keyboard input fails Product: xorg Version: unspecified Hardware: x86-64 (AMD64) OS: Linux (All) Status: NEW Severity: major Priority: medium Component: Driver/nouveau

https://bugs.freedesktop.org/show_bug.cgi?id=70390 Priority: medium Bug ID: 70390 Assignee: nouveau at lists.freedesktop.org Summary: G84: Repeated system crashes under graphics load, E[PFIFO] DMA_PUSHER and lots of E[PGRAPH] QA Contact: xorg-team at lists.x.org Severity: normal Classification: Unclassified