Re: [Shorewall-users] How to detect RTP traffic

2014-04-09 Thread Christian Rößner
Hi, I wanted to give a final result for my question. I have dropped the idea of using iptables with the -m string match and I implemented it directly with tc in u32: Am 08.04.2014 um 08:28 schrieb Christian Rößner : > Good morning, > Another approach may be to look at the packets themsel

Re: [Shorewall-users] How to detect RTP traffic

2014-04-07 Thread Christian Rößner
Good morning, >>> Another approach may be to look at the packets themselves. I've no idea if >>> RTP packets have useful "headers" in them, but VoIP packets are likely to >>> share certain characteristics in terms of size and frequency. So if you see >>> a constant stream of regular size packet

Re: [Shorewall-users] How to detect RTP traffic

2014-04-07 Thread Christian Rößner
Hi, Am 07.04.2014 um 15:03 schrieb Simon Hobson : > Another approach may be to look at the packets themselves. I've no idea if > RTP packets have useful "headers" in them, but VoIP packets are likely to > share certain characteristics in terms of size and frequency. So if you see a > constant

Re: [Shorewall-users] How to detect RTP traffic

2014-04-07 Thread Simon Hobson
Christian Rößner wrote: > So am I right that IPs from SIP providers seems to be the only solution at > the moment? That would be my best guess - but of course, only for "known" providers. In the day job I've installed a number of on-site PBXs (and we run one ourselves) - some of which have re

Re: [Shorewall-users] How to detect RTP traffic

2014-04-07 Thread Christian Rößner
Hi, >> I am looking for a way to detect RTP traffic. Currently I asked some SIP >> providers to tell me their networks and set up some rules in tcrules. But I >> would like a more generic version, where I am provider independent. > > In the general case, you'd need to examine the SIP packets to

Re: [Shorewall-users] How to detect RTP traffic

2014-04-07 Thread Simon Hobson
Christian Rößner wrote: > I am looking for a way to detect RTP traffic. Currently I asked some SIP > providers to tell me their networks and set up some rules in tcrules. But I > would like a more generic version, where I am provider independent. In the general case, you'd need to examine the

[Shorewall-users] How to detect RTP traffic

2014-04-06 Thread Christian Rößner
Hi, I am looking for a way to detect RTP traffic. Currently I asked some SIP providers to tell me their networks and set up some rules in tcrules. But I would like a more generic version, where I am provider independent. My router is a border router and connects PPPoE customers with the interne