Mailing List Archive: Re-2: Change ip_conntrack

You are right, indeed I have just tested and that doesn't work, it's just to follow traffic bound to sip. I thus will use your solution which after test goes very well.

I wanted just to keep the conntrack "hard compliled" in the kernel but obviously it is not possible.

.Sébastien

-------- Original Message --------
Subject: Re: Change ip_conntrack_sip default port (27-août-2007 9:52)
From: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
To: svecten@aressi.fr

> On Mon, 27 Aug 2007, Sebastien VECTEN wrote:
>
> > Thank you for your response, the good solution is the helper module to
> > change the defaut port.
> >
> > -m helper --helper sip-5068 in a rule.
>
> That is absolutely false: that is a *match*, which cannot do whatsoever
> with the ports of the helpers.
>
> The SIP helper supports to specify the ports to listen to:
>
> # modprobe ip_conntrack_sip ports=5060[,up to 8 ports]
>
> Best regards,
> Jozsef
> -
> E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : KFKI Research Institute for Particle and Nuclear Physics
> H-1525 Budapest 114, POB. 49, Hungary
>

To: netfilter@lists.netfilter.org
Cc: netfilter-failover@lists.netfilter.org

On Tue, 28 Aug 2007, Sebastien VECTEN wrote:

> You are right, indeed I have just tested and that doesn't work, it's
> just to follow traffic bound to sip. I thus will use your solution which
> after test goes very well.
>
> I wanted just to keep the conntrack "hard compliled" in the kernel but
> obviously it is not possible.

It is possible: on Thu, 23 Aug 2007 Pascal Hambourg wrote you
exactly what to do in the netfilter mailing list.

The whole question does not belong to the nf-failover list.

Best regards,
Jozsef
-
E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary