Those messages are not from the firewall itself, they are from nf_conntrack_sip. Have you tried unloading nf_conntrack_sip and nf_nat_sip ?

Pablo.

El 20/08/13 14:34, johnny bowen escribió:
Btw.. it only happens on one or two phones also, but I can't remember which ones.



On Tue, Aug 20, 2013 at 10:33 AM, johnny bowen <[email protected] <mailto:[email protected]>> wrote:

    I get that too. I've never solved the problem I just stopped
    rsyslog from logging to my console. So if I ever come across a fix
    I'll post it


    On Tue, Aug 20, 2013 at 9:20 AM, Alberto Di Fede
    <[email protected] <mailto:[email protected]>> wrote:

        Hi,

        i see this on the console and in the firewall logs while i try
        to make sip calls using my sip server (although this appears
        to happen only from a the Counterpath Bria softphone)

        Message from syslogd@server at Aug 20 17:24:39 ...
         kernel:nf_ct_sip: dropping packetIN= OUT=ppp0 SRC=<my public
        ip address> DST=<SIP provider public ip address> LEN=860
        TOS=0x00 PREC=0x00 TTL=64 ID=52154 PROTO=UDP SPT=5060 DPT=5060
        LEN=840 UID=493 GID=490

        Message from syslogd@server at Aug 20 17:24:39 ...
         kernel:nf_ct_sip: dropping packetIN= OUT=ppp0 SRC=<my public
        ip address> DST=<SIP provider public ip address> LEN=860
        TOS=0x00 PREC=0x00 TTL=64 ID=52155 PROTO=UDP SPT=5060 DPT=5060
        LEN=840 UID=493 GID=490

        Message from syslogd@server at Aug 20 17:24:40 ...
         kernel:nf_ct_sip: dropping packetIN= OUT=ppp0 SRC=<my public
        ip address> DST=<SIP provider public ip address> LEN=860
        TOS=0x00 PREC=0x00 TTL=64 ID=52156 PROTO=UDP SPT=5060 DPT=5060
        LEN=840 UID=493 GID=490

        Message from syslogd@server at Aug 20 17:24:41 ...
         kernel:nf_ct_sip: dropping packetIN= OUT=ppp0 SRC=<my public
        ip address> DST=<SIP provider public ip address> LEN=860
        TOS=0x00 PREC=0x00 TTL=64 ID=52159 PROTO=UDP SPT=5060 DPT=5060
        LEN=840 UID=493 GID=490

        Message from syslogd@server at Aug 20 17:24:45 ...
         kernel:nf_ct_sip: dropping packetIN= OUT=ppp0 SRC=<my public
        ip address> DST=<SIP provider public ip address> LEN=860
        TOS=0x00 PREC=0x00 TTL=64 ID=52161 PROTO=UDP SPT=5060 DPT=5060
        LEN=840 UID=493 GID=490

        after a few drops obviously the SIP call is dropped.

        i searched online for solutions, but apparently there seems to
        be no technical issue for my kernel/netfilter/shorewall
        version, most probably is related to my configuration.

        is there anything standing out for you?

        thank you


        Alberto

        
------------------------------------------------------------------------------
        Introducing Performance Central, a new site from SourceForge and
        AppDynamics. Performance Central is your source for news,
        insights,
        analysis and resources for efficient Application Performance
        Management.
        Visit us today!
        
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
        _______________________________________________
        Shorewall-users mailing list
        [email protected]
        <mailto:[email protected]>
        https://lists.sourceforge.net/lists/listinfo/shorewall-users





------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and
AppDynamics. Performance Central is your source for news, insights,
analysis and resources for efficient Application Performance Management.
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk


_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and 
AppDynamics. Performance Central is your source for news, insights, 
analysis and resources for efficient Application Performance Management. 
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to