Sign up ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

We are using Zentyal 3.1 (Ubuntu 12.04.2 LTS - kernel version: as proxy/firewall for our location. At the moment the firewall rules are set to allow all, however sip packets are still dropped. This is caused by the module nf_conntrack_sip.

When I manually unload the module + the module nf_nat_sip everything works as expected. The command I used for unloading is either (both work):

    rmmod nf_nat_sip
    rmmod nf_conntrack_sip


    modprobe -r nf_nat_sip
    modprobe -r nf_conntrack_sip

After a reboot ofcourse these modules are loaded again, so I added following lines to /etc/modprobe.d/blacklist.conf

    blacklist nf_nat_sip
    blacklist nf_conntrack_sip

But this didn't prevent the modules from loading. I even created a new file, /etc/modprobe.d/blacklist-custom.conf with the same two lines (and a blank new line), but the modules still get loaded at boot.

Then I tried a script that unloads the modules in upstart after the network devices come up, and that works. But after some time the modules do get loaded again by some unknown trigger.

I want these modules unloaded permanently, but kinda clueless atm on any other solutions.

share|improve this question
Ever find an answer to this? – exabrial Aug 4 '14 at 14:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.