Skip to contentSkip to conversation

nf_nat_sip with CT target

DISCUSSION Daniel Reurich 2 participants 4 messages Feb 13, 2013 – Feb 14, 2013

lore
Share & tools
lore
#0 lore raw

Hi,

I'm having trouble figuring out how to set up nf_nat_sip when using the CT target for loading nf_conntrack_sip.

The CT target for sip works fine.

What I'm struggling with is finding any documentation that indicates how to add the fucntion of nf_nat_sip as well.

Do I still need to manually load the nf_nat_sip module or can it be loaded by the conntrack helper or some similar method?

Thanks and regards,
Daniel

Signature · 3 lines
Daniel Reurich
Centurion Computer Technology (2005) Ltd.
021 797 722
#1 lore raw
Quoted 5 lines · Daniel Reurich

Hi,

I'm having trouble figuring out how to set up nf_nat_sip when using the CT target for loading nf_conntrack_sip.

Quoted 7 lines

The CT target for sip works fine.

What I'm struggling with is finding any documentation that indicates how to add the fucntion of nf_nat_sip as well.

Do I still need to manually load the nf_nat_sip module or can it be loaded by the conntrack helper or some similar method?

modprobe nf_nat_sip should be enough.

Regards.

#2 lore raw
Quoted 8 lines · Pablo Neira Ayuso
Quoted 7 lines · Daniel Reurich

Hi,

I'm having trouble figuring out how to set up nf_nat_sip when using the CT target for loading nf_conntrack_sip.

The CT target for sip works fine.

Quoted 8 lines
Quoted 5 lines

What I'm struggling with is finding any documentation that indicates how to add the fucntion of nf_nat_sip as well.

Do I still need to manually load the nf_nat_sip module or can it be loaded by the conntrack helper or some similar method?

modprobe nf_nat_sip should be enough.

I was under the impression that manually loading the modules was deprecated and they should autoload either via using a helper or the CT target.

Will nf_nat_sip just detect whether a sip connection needs to be NATed due to it's hitting the standard SNAT rule for that route, or do I need to create a nat table entry specifically for the sip connection with some other parameters such as -m helper --helper nat-sip ....

Just loading the nf_nat_sip doesn't seem to be enough.

Signature · 3 lines
Daniel Reurich
Centurion Computer Technology (2005) Ltd.
021 797 722
#3 lore raw
Quoted 12 lines · Daniel Reurich
Quoted 11 lines · Pablo Neira Ayuso
Quoted 10 lines · Daniel Reurich

Hi,

I'm having trouble figuring out how to set up nf_nat_sip when using the CT target for loading nf_conntrack_sip.

The CT target for sip works fine.

What I'm struggling with is finding any documentation that indicates how to add the fucntion of nf_nat_sip as well.

Quoted 8 lines
Quoted 4 lines
Quoted 2 lines

Do I still need to manually load the nf_nat_sip module or can it be loaded by the conntrack helper or some similar method?

modprobe nf_nat_sip should be enough.

I was under the impression that manually loading the modules was deprecated and they should autoload either via using a helper or the CT target.

The sip modules need to be loaded, no changes in that regard. If you disable automatic helper assignment, you have to use the CT target.