Jim Duda wrote:

>After reading this message, I did the following.
>Copied /usr/share/shorewall/modules to /etc/shorewall/modules.  The 
>one I have in /etc/shorewall was from an earlier
>3.2.x release.
>I manually added the four lines suggested in this thread.
>I restarted shorewall, and saw that the new kernel modules for sip 
>and h323 were now loaded.
>I then realized that my asterisk application wasn't working.
>I removed the modules from shorewall.
>Asterisk still broken.
>I unloaded the kernel modules and restarted asterisk.
>Asterisk now functions again.
>When it was broken, the sip clients couldn't register for some reason.


Are your SIP clients configured to talk to the public or private 
address on the firewall ? Are they internal or external to the 
firewall ?

I'm guessing that the SIP NAT module is looking inside the SIP 
messages for IP addresses, and mangling these to match the NAT that 
is being done - it looks like you have a situation where the result 
is not correct.

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to