[Asterisk-Users] Nat...again....

[Mark Woods]

This has probably been answered somewhere, but I'm stumped.

I have two Zap channels (FXS and FXO), both working fine.  I
can call from Zap/1 to Zap/2 and reverse.

I've also configured SIP channels, both inside and outside of my
firewall.  Inside can call outside, and outside can call inside.
Also, both inside and outside can make and receive calls to/from
Zap/1 & Zap/2.

What doesn't work, and makes no sense to me given the above, is
two outside SIP channels can connect but cannot pass traffic.  It
would make sense to me if I couldn't already accept inbound/outbound
SIP calls in some other way, but that isn't the case....

Thoughts?  My sip.conf is below (edited slightly for privacy):

Thanks!

[general]
port = 5060                     ; Port to bind to
bindaddr = 0.0.0.0              
context=sip-extensions
;srvlookup = yes                
;pedantic = yes                 
;tos=lowdelay                   
;maxexpirey=3600                
;defaultexpirey=120             
;notifymimetype=text/plain      
;videosupport=yes               
externip = xxx.xxx.xxx.xxx
localnet = 192.168.1.0          
localmask = 255.255.255.0       

[5001]
qualify=yes
type=friend
context=sip-extensions
username=5001
callerid=5001 <5001>
host=dynamic
nat=no
canreinvite=no
dtmfmode=rfc2833
mailbox=5001

[5002]
qualify=yes
context=sip-extensions
type=friend
username=5002
callerid=5002 <5002>
host=dynamic
nat=yes
canreinvite=no
dtmfmode=rfc2833
mailbox=5002

[5003]
qualify=yes
context=sip-extensions
type=friend
username=5003
callerid=5002 <5002>
host=dynamic
nat=yes
canreinvite=no
dtmfmode=rfc2833
mailbox=5003

[5004]
qualify=yes
context=sip-extensions
type=friend
username=5004
callerid=5004 <5004>
host=dynamic
nat=yes
canreinvite=no
dtmfmode=rfc2833
mailbox=5004