Hello shorewall-users,

I am runnung shorewall 4.4.11.6 on debian squeeze. It seems that some
packages are not masqueraded and I am not sure why.

My masq file is as follows:
eth1                    10.232.0.0/16
ppp0            10.232.0.0/16

Here is one except from a package trace from eth1. It shows one of the
internal boxes trying to register 2 different SIP accounts:
989.063344 189.61.199.178 -> 217.9.36.145 SIP Request: REGISTER sip:iptel.org
989.065124   10.232.0.9 -> 201.86.87.36 SIP Request: REGISTER sip:vono.net.br
989.325070 217.9.36.145 -> 189.61.199.178 SIP Status: 401 Unauthorized
   (0 bindings)
989.523246 189.61.199.178 -> 217.9.36.145 SIP Request: REGISTER sip:iptel.org
989.779081 217.9.36.145 -> 189.61.199.178 SIP Status: 200 OK    (1 bindings)
990.060768   10.232.0.9 -> 201.86.87.36 SIP Request: OPTIONS sip:vono.net.br
990.064791   10.232.0.9 -> 201.86.87.36 SIP Request: REGISTER sip:vono.net.br
991.061014   10.232.0.9 -> 201.86.87.36 SIP Request: OPTIONS sip:vono.net.br
991.065030   10.232.0.9 -> 201.86.87.36 SIP Request: REGISTER sip:vono.net.br
992.061244   10.232.0.9 -> 201.86.87.36 SIP Request: OPTIONS sip:vono.net.br

Notice that the first package is masqueraded, but the second is not.

I ask for advice in understanding what is going on.

Regards,

Pedro

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to