[Asterisk-Users] Conecting to asterisk server through NAT usingIAX

Bartosz Wegrzyn - asterisk junk at lexon.ws
Mon Feb 21 03:52:01 MST 2005


This was set on linksys wrt54.
I turned on the forwarding to asterisk server on port 4569.
I believe that by default all outgoing packets pass through.

Bart,

> Hallo
> Did you allow udp outgoing on 4569 as well.. i found
> udp bit different than
> tcp when comming to firewalls
> liaan
>
> ----- Original Message -----
> From: "Bartosz Wegrzyn - asterisk" <junk at lexon.ws>
> To: <timebandit001 at gmail.com>; "Asterisk Users Mailing
> List - Non-Commercial
> Discussion" <asterisk-users at lists.digium.com>
> Sent: Monday, February 21, 2005 12:29 PM
> Subject: Re: [Asterisk-Users] Conecting to asterisk
> server through NAT
> usingIAX
>
>
>>I did change the port 4569.
>> Also my router forwards those packets.
>>
>> If I start tcpdump port 4569 on my server I receive:
>>
>> 04:25:36.061292 IP 192.168.1.253.4569 >
> beu164.neoplus.adsl.tpnet.pl.4569:
>> UDP, length 24
>> 04:25:39.154871 IP beu164.neoplus.adsl.tpnet.pl.4569
>> 192.168.1.251.4569:
>> UDP, length 24
>> 04:25:39.155919 IP 192.168.1.253.4569 >
> beu164.neoplus.adsl.tpnet.pl.4569:
>> UDP, length 12
>> 04:25:44.063009 IP 192.168.1.253.4569 >
> beu164.neoplus.adsl.tpnet.pl.4569:
>> UDP, length 12
>> 04:25:46.063463 IP 192.168.1.253.4569 >
> beu164.neoplus.adsl.tpnet.pl.4569:
>> UDP, length 24
>> 04:25:46.063952 IP 192.168.1.253.4569 >
> beu164.neoplus.adsl.tpnet.pl.4569:
>> UDP, length 12
>> 04:25:49.119019 IP beu164.neoplus.adsl.tpnet.pl.4569
>> 192.168.1.251.4569:
>> UDP, length 24
>> 04:25:49.120272 IP 192.168.1.253.4569 >
> beu164.neoplus.adsl.tpnet.pl.4569:
>> UDP, length 12
>>
>> It means that client is trying to comunicate with
> asterisk server.
>> But the client says that the server could not be
> contacted.
>>
>> On asterisk console with iax2 debuging enabled I
> receive
>>
>> Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00007ms  SCall: 00001  DCall: 00000
> [66.234.228.170:4569]
>>   USERNAME        : nWv96gaD75
>>   REFRESH         : 60
>>
>> Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass:
>> REGAUTH
>>   Timestamp: 00012ms  SCall: 00055  DCall: 00001
> [66.234.228.170:4569]
>>   AUTHMETHODS     : 3
>>   CHALLENGE       : 164462354
>>   USERNAME        : nWv96gaD75
>>
>> Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00049ms  SCall: 00001  DCall: 00055
> [66.234.228.170:4569]
>>   USERNAME        : nWv96gaD75
>>   REFRESH         : 60
>>   MD5 RESULT      : 478939afef8fa0ec5b480cc939dedf6f
>>
>> Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 002 Type:
> IAX     Subclass:
>> REGACK
>>   Timestamp: 00047ms  SCall: 00055  DCall: 00001
> [66.234.228.170:4569]
>>   USERNAME        : nWv96gaD75
>>   DATE TIME       : 173363009
>>   REFRESH         : 60
>>   APPARENT ADDRES : IPV4 69.208.170.240:4569
>>
>> Tx-Frame Retry[-01] -- OSeqno: 002 ISeqno: 002 Type:
> IAX     Subclass: ACK
>>   Timestamp: 00047ms  SCall: 00001  DCall: 00055
> [66.234.228.170:4569]
>> Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
> [83.28.32.164:4569]
>>   USERNAME        : tester
>>   REFRESH         : 300
>>
>> Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass:
>> REGAUTH
>>   Timestamp: 00019ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>>   AUTHMETHODS     : 1
>>   USERNAME        : tester
>>
>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
> [83.28.32.164:4569]
>>   USERNAME        : tester
>>   REFRESH         : 300
>>
>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass: ACK
>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
> [83.28.32.164:4569]
>>   USERNAME        : tester
>>   REFRESH         : 300
>>
>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass: ACK
>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
> [83.28.32.164:4569]
>>   USERNAME        : tester
>>   REFRESH         : 300
>>
>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass: ACK
>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>> Tx-Frame Retry[001] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass:
>> REGAUTH
>>   Timestamp: 00019ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>>   AUTHMETHODS     : 1
>>   USERNAME        : tester
>>
>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
> [83.28.32.164:4569]
>>   USERNAME        : tester
>>   REFRESH         : 300
>>
>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass: ACK
>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>> Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001 Type:
> IAX     Subclass:
>> LAGRQ
>>   Timestamp: 10022ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>> Tx-Frame Retry[002] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass:
>> REGAUTH
>>   Timestamp: 00019ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>>   AUTHMETHODS     : 1
>>   USERNAME        : tester
>>
>> Tx-Frame Retry[001] -- OSeqno: 001 ISeqno: 001 Type:
> IAX     Subclass:
>> LAGRQ
>>   Timestamp: 10022ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 000 Type:
> IAX     Subclass:
>> REGREQ
>>   Timestamp: 00003ms  SCall: 13354  DCall: 00000
> [83.28.32.164:4569]
>>   USERNAME        : tester
>>   REFRESH         : 300
>>
>> Tx-Frame Retry[-01] -- OSeqno: 000 ISeqno: 001 Type:
> IAX     Subclass: ACK
>>   Timestamp: 00003ms  SCall: 00002  DCall: 13354
> [83.28.32.164:4569]
>> Tx-Frame Retry[000] -- OSeqno: 002 ISeqno: 001 Type:
> IAX     Subclass:
>> PING
>>   Times
>>
>>
>> Any ideas what could be wrong.
>>
>> Thanks
>>
>>
>>>> I use linksys router.
>>>> Now, I am trying to connect from outside to my
> asterisk server.
>>>> I use Diax as iax client.
>>>> For some reason I cannot connect to my server from
> outside.
>>>> On my router I forward those ports to my asterisk
> server.
>>>> 5060-5063
>>>> 10000-20000
>>>> 5036
>>>> 4569
>>> For IAX, only port you have to forward is 4569 UDP
>>>
>>> Notice the UDP, not TCP
>>>
>>> I'm using Linksys WRT54G and it works without a
> hitch.
>>>
>>>> It works ok with broadvoice, but clinets cannot
> connect to the server.
>>>> This is my iax.conf file
>>>> [general]
>>>> port=5036
>>>
>>> well, here's your problem, port=5036. This is not
> the standard IAX
>>> port. comment that line or replace it with
> port=4569
>>>
>>> hth
>>> _______________________________________________
>>> Asterisk-Users mailing list
>>> Asterisk-Users at lists.digium.com
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>> To UNSUBSCRIBE or update options visit:
>>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>>
>>
>> _______________________________________________
>> Asterisk-Users mailing list
>> Asterisk-Users at lists.digium.com
>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>> To UNSUBSCRIBE or update options visit:
>>
> http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>
>
>
>
> __________________________________
> Do you Yahoo!?
> The all-new My Yahoo! - Get yours free!
> http://my.yahoo.com
>
>
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>




More information about the asterisk-users mailing list