<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi all, tks for your time, I could solve the problem on the box that is
behind the iptables firewall. I rewrote the rules and the externip is
coming with the messages, working with either public and nated uas.<br>
<br>
I will try further with the asterisk box behind a linksys firewall.<br>
<br>
The rules I used, just for the record was:<br>
<br>
For outbound NAT (ppp0 is my external interface of nat/firewall box):<br>
<br>
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE<br>
<br>
<br>
For port redirection (192.168.1.10 => asterisk internal ip):<br>
<br>
iptables -t nat -A PREROUTING -i eth0 -p udp -m udp --dport 10000:20000
-j DNAT --to-destination 192.168.1.10<br>
iptables -t nat -A PREROUTING -i eth0 -p udp -m udp --dport 5060 -j
DNAT --to-destination 192.168.1.10<br>
<br>
<br>
Regards and tks again. If anybody has any issue on this subjet, feel
free to ask me.<br>
<br>
Ricardo.<br>
<br>
<br>
Gordon Henderson escreveu:
<blockquote
cite="mid:Pine.LNX.4.64.0906161636480.2514@unicorn.drogon.net"
type="cite">
<pre wrap="">On Tue, 16 Jun 2009, Ricardo Martins wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Yes Gordon. I'm using nat=yes and I don't have an ALG enabled
router/firewall. I used the sip debug output on the asterisk(s) and
could see the sdp headers as they were gererated by asterisk, with the
wrong (internal) address on it.
Asterisk is sending the audio to the correct way, the public IP of
client side NAT. But the client is sending it to the wrong address, the
private IP of asterisk side NAT.
</pre>
</blockquote>
<pre wrap=""><!---->
Er, in that case, I can't suggest what might be wrong. All my boxes out in
the field are 1.2 though...
Gordon
</pre>
<blockquote type="cite">
<pre wrap="">Rgrs, Ricardo.
Gordon Henderson escreveu:
On Tue, 16 Jun 2009, Ricardo Martins wrote:
Hi all! Do anybody has a full working environment using externip on an
asterisk box behind a nat? I tried with two diferent boxes
(Elastix-1.4.24 e Trixbox-1.4.22-3)and the asterisk do not replace
neither contact, neither sdp headers info with the externip informed on
sip.conf general parameters.
I used these two statements:
externip=XXX.XXX.XXX.XXX
localnet=192.168.200.0/255.255.255.0
Do anybody in list had those dificulties? That's strange because I could
not make this work on two diferent instalations! Trying hard to think
about what's missing.
I have dozens of boxes doing it this way. All "just work".
Have you nat=yes in there too? Also you did port-forward from the router
to the box as well, didn't you?
Often the router will have a broke SIP ALG which will get in the way too.
Turn it off if you can.
Gordon
_______________________________________________
-- Bandwidth and Colocation Provided by <a class="moz-txt-link-freetext" href="http://www.api-digital.com">http://www.api-digital.com</a> --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
<a class="moz-txt-link-freetext" href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a>
</pre>
</blockquote>
<pre wrap=""><!---->
_______________________________________________
-- Bandwidth and Colocation Provided by <a class="moz-txt-link-freetext" href="http://www.api-digital.com">http://www.api-digital.com</a> --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
<a class="moz-txt-link-freetext" href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a>
</pre>
</blockquote>
<br>
</body>
</html>