Re: nf_conntrack_sip and ekiga

On Sun, Jan 25, 2015 at 01:55:27PM +0100, Damien Sandras wrote:
> Actually, it should magically work without doing anything. You do not
> even need distinct destination ports: Linux implements symmetric NAT,
> where the public IP/Port will be dynamically allocated depending on the
> internal IP:port and the external IP:port. As long as the internal IP is
> different, you do not need to ensure different internal ports.
> 
> If it does not magically work (with STUN disabled), then there are still
> bugs...
> 
> I have never tried it myself.
> 
> Damien
> 
> > What is the status of ekiga and the nf_conntrack-sip netfilter module?

Thanks for the reply. I will experiment and report back and maybe put
something on the wiki if I get it working. It may take some time: I am
still finding my way around openWRT and custom compilation.

I was a little concerned about the tracker modifying the contents of
SIP packets: commercial routers with "SIP ALG" which I suspect are based
on these modules seem to fail.

ael