[Asterisk-Users] SIP NAT + m0n0wall 1:1 mapping

[Colin Anderson]

>In my instance I'm using m0n0wall, but this is a hardware-neutral 
>question. 

Sometimes, yes and no. The trick in Monowall I founds is to use the " auto
add " in Monowall to create the rules. If you manually create the rule, she
don' work. Why? Dunno. Using 1.11 built on Thu Nov 11 23:02:41 CET 2004
generic-pc-cdrom. Works behind my mother in law's crappy SMC router with
appropriate rules created.


Firewall > NAT 

Interface > Wan

External Address > External IP

Protocol: tcp/udp (snom for example can pass either) 

Source: Any

Port: Any / Any 

NAT IP > Your Asterisk Server IP

Local Port > (Other) 5060

Description: Asterisk SIP rule

" Auto-add a firewall rule to permit traffic through this NAT rule is
CHECKED! " 



Firewall > NAT 

Interface > WAN

External Address > External IP

Protocol > tcp/udp 

Source > 10000-20000

Port > Any / Any 

NAT IP > Your Asterisk Server IP

Local port > 10000:20000

Description: Asterisk Media Stream Rule

" Auto-add a firewall rule to permit traffic through this NAT rule is
CHECKED! "

Tested w/ X-Ten & Snom 190 YMMV HTH


-----Original Message-----
From: Robert Goodyear [mailto:me at jrob.net]
Sent: Monday, July 11, 2005 9:58 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: [Asterisk-Users] SIP NAT + m0n0wall 1:1 mapping


I know a SIP client behind a NAT trying to peer with Asterisk behind 
another NAT is troublesome. Has anyone had any luck doing this by 
interfacing Asterisk to the WAN using 1:1 NAT translation to give it a 
public IP while still firewalled?

In my instance I'm using m0n0wall, but this is a hardware-neutral 
question.

Thanks.

-- 
Robert Goodyear
Brand Up LLC
http://www.brand-up.com

_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users