Problems with the ip_nat_h323

Jozsef Kadlecsik kadlec at
Thu Aug 25 09:07:37 CEST 2005


On Wed, 24 Aug 2005, Andrew Cant wrote:

> I am attempting to get the H323 nat module working. Specifically I want to
> pass MGCP VoIP traffic, not H323, but I believe that the H323 module should
> do the job.
> I am using a 2.4.28 kernel, with iptables 1.2.9, and patch-o-matic-20031219.
> I am also using the transparent proxy patches(TPROXY), and serveral other
> NAT helpers(ftp, tftp, pptp, proto_gre).

That's a too old kernel and too old pom version. You should use kernel
version 2.6.11 or above and the H.323 helper from a recent pom-ng release.

The helper had been completely rewritten by Max Kellermann for the 2.6
tree - the old version you use works in the most simple cases only.

Best regards,
E-mail  : kadlec at, kadlec at
PGP key :
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

More information about the netfilter mailing list