[Asterisk-Users] Asterisk Behind NAT

[Tom Rymes]

This has already been mentioned, but I remembered this froma  little
while back (sorry forget the original poster):

<Begin Quoted message>
Thanks to Pau (the original person to pose the question on this list),
it's fixed.  The firewall was getting in the way.  I needed to open up
UDP ports 10000 to 20000 for RTP traffic.

See the following for more info:
http://www.voip-info.org/tiki-index.php?page=Asterisk%20config%20rtp.con
f
http://www.voip-info.org/wiki-Asterisk+firewall+rules 

<end Quote>

Tom

> -----Original Message-----
> From: asterisk-users-bounces at lists.digium.com 
> [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of 
> rudolfl at optusnet.com.au
> Sent: Monday, February 28, 2005 4:51 PM
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: Re: [Asterisk-Users] Asterisk Behind NAT
> 
> 
> 
> Hi,
> 
> I am working on exact same problem now and open to any suggestions.
> 
> So far I :
> 1. Made my NAT device to forward port 5060 to Asterisk server. 
> 2. Added line 'nat=yes' to the sip.conf for the user that is 
> on outside.
> 
> At the moment, outside phone registers with Asterisk, but I 
> can only place calls in one direction and when cal is 
> established, no sound path exist. Asterisk tries to talk to 
> the remote phone using its local IP address and this does not work. 
> 
> Let us know if you get anywhere and I will keep you posted too. Rudolf
> 
> 
> > sammy ominsky <s at avoidant.org> wrote:
> > 
> > Hi all,
> > 
> > I've done quite a bit of reading, and I see that it's going to be
> > difficult, but as a last-ditch effort before implementing a 
> suggestion 
> > I don't like at all, I figured I'd ask...
> > 
> > Has anyone successfully put an asterisk box on an internal network
> > behind a NAT device and been able to connect with SIP from 
> outside?  
> > The real point behind all this is to implement QoS for the voice 
> > traffic, and putting a third box in front of the asterisk 
> and NAT boxes 
> > 
> > has been deemed "too expensive".
> > 
> > Currently, asterisk has a public IP, as does the NAT box 
> behind which
> > all the office machines sit.  If it can be done, the NAT 
> box would be 
> > the best place to do the QoS, so why not ask, right?
> > 
> > Alternatively, I'm open to any suggestions that would work. 
>  I've been
> > handed this challenge on my first day on a new job... :/
> > 
> > Thanks,
> > 
> > ---sambo
> > 
> > _______________________________________________
> > Asterisk-Users mailing list
> > Asterisk-Users at lists.digium.com 
> > http://lists.digium.com/mailman/listinfo/asterisk-users
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-users
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com 
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>