par contre il faut p-e une regle iptables du genre :
iptables -A FORWARD -p all -m state --state ESTABLISHED,RELATED -j ACCEPT
(pour autoriser vraiment le conntrack)
Mik
Chez moi dans le debug ca donne qq chose du genre :
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: conntrackinfo = 2
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: conntrackinfo = 2
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: found a setup message
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: rtsp_parse_transport: tran='Transport: RTP/AVP;unicast;client_port=33440-33441^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: rtsp_parse_transport: lo port found : 33440
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: udp transport found, ports=(1,33440,33441)
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: Changing expectation mask to handle multiple ports
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: expect_related 212.27.38.253:0-82.233.104.105:33440
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: NAT rtsp help_out
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: len=9, CSeq: 2^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: len=52, Transport: RTP/AVP;unicast;client_port=33440-33441^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: Transport
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: rtsp_mangle_tran: stunaddr=82.233.104.105 (auto)
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: rtsp_mangle_tran: using ports 33440-33441
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: rep: len=52, Transport: RTP/AVP;unicast;client_port=33440-33441^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: len=59, User-Agent: MPlayer (LIVE555 Streaming Media v2005.10.05)^M
Feb 21 09:46:27 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:27 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:27 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: expected: newsrcip=212.27.38.253, newdstip=10.0.0.2, newip=10.0.0.2
(la derniere ligne indique que le conntrack marche normalement ;)
[^] # Re: Voila
Posté par Mickael Marchand . En réponse au message besoin de testeurs pour patch conntrack+RTSP+2.6.15. Évalué à 2.
normalement y a aucun param a passer.
par contre il faut p-e une regle iptables du genre :
iptables -A FORWARD -p all -m state --state ESTABLISHED,RELATED -j ACCEPT
(pour autoriser vraiment le conntrack)
Mik
Chez moi dans le debug ca donne qq chose du genre :
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: conntrackinfo = 2
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: conntrackinfo = 2
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: found a setup message
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: rtsp_parse_transport: tran='Transport: RTP/AVP;unicast;client_port=33440-33441^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: rtsp_parse_transport: lo port found : 33440
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: udp transport found, ports=(1,33440,33441)
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: Changing expectation mask to handle multiple ports
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help_out: expect_related 212.27.38.253:0-82.233.104.105:33440
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: NAT rtsp help_out
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: len=9, CSeq: 2^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: len=52, Transport: RTP/AVP;unicast;client_port=33440-33441^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: Transport
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: rtsp_mangle_tran: stunaddr=82.233.104.105 (auto)
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: rtsp_mangle_tran: using ports 33440-33441
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: rep: len=52, Transport: RTP/AVP;unicast;client_port=33440-33441^M
Feb 21 09:46:25 localhost kernel: net/ipv4/netfilter/ip_nat_rtsp.c: help_out: hdr: len=59, User-Agent: MPlayer (LIVE555 Streaming Media v2005.10.05)^M
Feb 21 09:46:27 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:27 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: help: IP_CT_DIR_REPLY
Feb 21 09:46:27 localhost kernel: net/ipv4/netfilter/ip_conntrack_rtsp.c: expected: newsrcip=212.27.38.253, newdstip=10.0.0.2, newip=10.0.0.2
(la derniere ligne indique que le conntrack marche normalement ;)