[asterisk-users] [Fwd: Asterisk client for ekiga.net NAT problem]

[obitori junk]

I am experiencing a "606 not Acceptable" error trying to set up an
Asterisk server as an ekiga.net client.  My server is behind a firewall
with NAT routing.  I have googled this problem and read about Asterisk
feeding its local ip address to ekiga.net.  That seems to be my
problem.  

I tried putting stunaddr=stun.ekiga.net into the sip.conf file under
[ekiga].  I also tried externip=71.xxx.xxx.xxx as shown below.  Neither
works.  My junction client set up is working behind the same firewall.  

Can anybody suggest a fix?  

Thanks,

Bud Roth

P.S. Debug output and sip.conf file pasted below:

Sip set debug output:

<--- SIP read from 86.64.162.35:5060 --->
SIP/2.0 606 Not Acceptable
Via: SIP/2.0/UDP
10.1.1.40:5060;branch=z9hG4bK2f1127c2;rport=9288;received=71.178.235.241
From: <sip:budzhaus at ekiga.net>;tag=as7506851f
To: <sip:budzhaus at ekiga.net>;tag=c64e1f832a41ec1c1f4e5673ac5b80f6.ddfa
Call-ID: 7ed69d2f12f88039420ab10a32604322 at 127.0.0.1
CSeq: 124 REGISTER
Server: Kamailio (1.4.0-notls (i386/linux))
Content-Length: 0

-----------------------

---
victoria*CLI> 
<--- SIP read from 86.64.162.35:5060 --->
SIP/2.0 484 Address Incomplete
Via: SIP/2.0/UDP
10.1.1.40:5060;branch=z9hG4bK176cc789;rport=9288;received=71.178.235.241
From: "asterisk" <sip:asterisk at 10.1.1.40>;tag=as183adb5e
To: <sip:ekiga.net>;tag=c64e1f832a41ec1c1f4e5673ac5b80f6.d07f
Call-ID: 43e457266aaf90c115d37a47156c17a3 at 10.1.1.40
CSeq: 102 OPTIONS
Server: Kamailio (1.4.0-notls (i386/linux))
Content-Length: 0


<------------->

relevant portions of sip.conf:

[general]
context=default
srvlookup=yes
videosupport=yes
echocancelwhenbridged=yes
dtmfmode=rfc2833

disallow=all   ; First disallow all codecs
allow=ulaw
allow=alaw     ; Allow codecs in order of
allow=ilbc     ; preference
allow=gsm
allow=h261

register => budzhaus:SECRETHERE at ekiga.net
register => obitori:SECRETHERE at jnctn.net


SNIP

[jnctn]
type=peer
host=sip.jnctn.net
username=obitori
secret=SECRETHERE
fromdomain=jnctn.net
insecure=very
nat=yes
qualify=yes
context=incoming

[101]
type=friend
secret=SECRETHERE
qualify=yes    ; Qualify peer is not more than 2000 mS away
nat=no         ; This phone is not natted
host=dynamic   ; This device registers with us
canreinvite=yes ; Asterisk by default tries to redirect
context=home

;in/outgoing to ekiga.net
[ekiga]
type=friend
username=budzhaus
secret=SECRETHERE
host=ekiga.net
canreinvite=no
qualify=yes
insecure=very
fromdomain=ekiga.net
nat=yes
context=incoming
externip=71.xxx.xxx.xxx
localnet=10.1.1.0/255.255.255.0

-  
Bud Roth
Lake Barcroft, VA
public PGP key available at:
https://www.cacert.org/gpg.php?id=3&cert=9272

For Northern Virginia's best Judo, visit:
http://sportjudo.org