Bug#715822: linux-image-3.9-1-686-pae: SIP NAT problem in kernel 3.9
Package: linux-image-3.9-1-686-pae
Severity: normal
Dear Maintainer,
Today I installed the 3.9-1 kernel package for my Debian Testing Router Box.
This box does NAT in my private network, including NAT traversal of the SIP
protocol.
Since kernel 3.9, NAT for SIP protocol seems to be broken for some SIP providers, with these error messages:
nf_ct_sip: dropping packet: cannot NAT SIP message IN= OUT= SRC=212.27.52.5 DST=192.168.128.30
LEN=338 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=UDP SPT=5060 DPT=49027 LEN=318
This bug was already also reported for the Fedora project, but applies to debian, too. I had to uninstall
the kernel and downgrade to the 3.2 one.
The problem is a missing { } around an if statement, where a log message was added. The original
"return NF_DROP" was then affecting the main branch of the code. The if-branch only showed the new message.
But every connection was dropped because of the return from function, whcih was no longer conditional.
See the fedora bug report for the fix:
https://bugzilla.redhat.com/show_bug.cgi?id=965307
I hope this can be fixed asap, because the new kernel is unuseable for me.
Thanks,
Uwe
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages linux-image-3.9-1-686-pae depends on:
ii debconf [debconf-2.0] 1.5.50
ii initramfs-tools [linux-initramfs-tool] 0.113
ii kmod 9-3
ii linux-base 3.5
ii module-init-tools 9-3
Versions of packages linux-image-3.9-1-686-pae recommends:
ii firmware-linux-free 3.2
ii libc6-i686 2.17-7
Versions of packages linux-image-3.9-1-686-pae suggests:
pn debian-kernel-handbook <none>
ii grub-pc 1.99-27+deb7u1
pn linux-doc-3.9 <none>
Reply to: