H323 connection tracking in Linux 2.6.20.1

[Chris Rankin]

Hi,

I am trying the H323 connection tracking in Linux 2.6.20.1, but am getting the following errors:

Feb 25 20:42:59 wellhouse kernel: nf_ct_h245: packet dropped
Feb 25 20:43:04 wellhouse last message repeated 10 times
Feb 25 20:43:17 wellhouse kernel: printk: 1 messages suppressed.
Feb 25 20:43:17 wellhouse kernel: nf_ct_h245: packet dropped
Feb 25 20:43:23 wellhouse last message repeated 2 times
Feb 25 20:43:24 wellhouse kernel: printk: 5 messages suppressed.
Feb 25 20:43:24 wellhouse kernel: nf_ct_h245: packet dropped
Feb 25 20:43:44 wellhouse kernel: printk: 9 messages suppressed.
Feb 25 20:43:44 wellhouse kernel: nf_ct_q931: decoding error: out of bound
Feb 25 20:43:44 wellhouse kernel: nf_ct_q931: decoding error: out of bound

I suspect that this is related to my GNU Gatekeeper 2.0.8, which I have running on my firewall
machine. At the moment, the only way that I have managed to make a H323 connection has been to
disable H245 in Ekiga. However, I don't need the firewall rule to allow the UDP traffic explicitly
any more.

Cheers,
Chris

P.S. Removing the nf_conntrack_h323 module quickly kills my machine.



		
___________________________________________________________ 
Yahoo! Messenger - with free PC-PC calling and photo sharing. http://uk.messenger.yahoo.com