Patrick McHardy 1b683b5512 [NETFILTER]: sip conntrack: better NAT handling
The NAT handling of the SIP helper has a few problems:

- Request headers are only mangled in the reply direction, From/To headers
  not at all, which can lead to authentication failures with DNAT in case
  the authentication domain is the IP address

- Contact headers in responses are only mangled for REGISTER responses

- Headers may be mangled even though they contain addresses not
  participating in the connection, like alternative addresses

- Packets are droppen when domain names are used where the helper expects
  IP addresses

This patch takes a different approach, instead of fixed rules what field
to mangle to what content, it adds symetric mapping of From/To/Via/Contact
headers, which allows to deal properly with echoed addresses in responses
and foreign addresses not belonging to the connection.

Signed-off-by: Patrick McHardy <kaber@trash.net>
2006-12-02 21:31:26 -08:00
..
2006-12-02 21:21:17 -08:00
2006-12-02 21:21:17 -08:00
2006-09-28 18:02:23 -07:00
2006-09-28 18:02:29 -07:00
2006-10-04 00:31:09 -07:00
2006-12-02 21:21:17 -08:00
2005-04-16 15:20:36 -07:00
2006-09-22 15:18:04 -07:00
2006-10-25 23:04:12 -07:00
2006-12-02 21:27:18 -08:00
2006-09-28 18:03:07 -07:00
2006-12-02 21:24:03 -08:00
2006-10-04 00:31:09 -07:00