On Thu, Oct 06, 2005 at 08:35:29PM +1000, Darren Reed wrote:
> > > Is there a possibility to change the state timeout for an UDP
> > > connection? The timeout is obviously set to 120 seconds. It is
> > > possible to view this with the "ipfstat -t" command.
> 
> Try:
> .. keep state keep state-age 600

!!! It works!! Thanks a lot!! No missed calls anymore! This was
exactly what I wanted, and hoped for:-)

> > > The even better solution would be to have an IAX2 proxy in
> > > ip-filter! A built in stateful SIP proxy is also on the wish list, but
> > > would be *far* more complicated.
> 
> Yes, but this is recognised too.

Well, the structure and the type of problems should be similar
to those of the existing H.323 proxy. So it might be doable:-)
One might argue, that SIP is a type of protocol that we don't
want to handle at all in our firewalls. But we may all be
forced to think otherwise:-(

Once again, thaks a lot:                Håkan

Attachment: pgpxYSQBy7EH7.pgp
Description: PGP signature

Reply via email to