On 03/16/2011 03:37 PM, Dennis Muhlestein wrote:
On 03/16/2011 03:27 PM, Simon Horne wrote:
H323plus does not maintain conntrack h323. If you are using H.460.18/19 you do not need the NAT assistant services (ALG) of conntrack. In fact the problem might simply be the ALG is getting in the way. I recommend it be turned off or you disable H.460.18/.19. Don't have both running.
Oh yeah, we use H.460.18/19 to talk with our gatekeeper and it does quite nicely the job of getting around NAT problems. (The conntrack module does not do this unless it is running on a public facing ip address, which it isn't.) So that is why we're using H.460. but it isn't H.460 in combination with conntrack that is causing the issue. Conntrack causes us dropped packet issues without it. (In that case, it drops other packets in other situations.)