From d119795e592c937a94fa012f65590f032af373f3 Mon Sep 17 00:00:00 2001 From: Mark Wooding Date: Fri, 9 Dec 2011 23:11:50 +0000 Subject: [PATCH] vampire.m4: Load protocol-specific NAT helper modules. --- vampire.m4 | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/vampire.m4 b/vampire.m4 index 7584566..55c7961 100644 --- a/vampire.m4 +++ b/vampire.m4 @@ -108,5 +108,15 @@ run iptables -t nat -A outbound -j RETURN -d 172.29.198.0/23 run iptables -t nat -A outbound -j SNAT --to-source 62.49.204.158 run iptables -t nat -A POSTROUTING -j outbound +## Set up NAT protocol helpers. In particular, SIP needs some special +## twiddling. +run modprobe nf_conntrack_sip \ + ports=5060 \ + sip_direct_signalling=0 \ + sip_direct_media=0 +for p in ftp sip h323; do + run modprobe nf_nat_$p +done + m4_divert(-1) ###----- That's all, folks -------------------------------------------------- -- 2.11.0