<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
On 2017-04-18 03:38 PM, Duncan Turnbull wrote:<br>
<blockquote cite="mid:em5e81b46b-ce75-4f26-abeb-d170e7506154@mibble"
type="cite">
<style id="eMClientCss">blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weight: normal; font-style: normal;}
a img { border: 0px; }body {font-family: Tahoma;font-size: 12pt;}
.plain pre, .plain tt {font-family: Tahoma;font-size: 12pt;}
</style>
<style></style>
<div>------ Original Message ------</div>
<div>From: "Ernie Dunbar" <<a moz-do-not-send="true"
href="mailto:maillist@lightspeed.ca">maillist@lightspeed.ca</a>></div>
<div>To: "'Asterisk Users Mailing List - Non-Commercial
Discussion'" <<a moz-do-not-send="true"
href="mailto:asterisk-users@lists.digium.com">asterisk-users@lists.digium.com</a>></div>
<div>Sent: 19-Apr-17 10:25:59 AM</div>
<div>Subject: [asterisk-users] SIP connections over OpenVPN
connection get one-way voice.</div>
<div> </div>
<div id="xa3f7e734b38b4c5289e7d0c46caa26c9" style="COLOR: #000000">
<blockquote class="cite2"
cite="ff7e561a-bc8b-097d-5b3f-6657ea162b4f@lightspeed.ca"
type="cite">Hi everyone. I'm having some trouble with an
OpenVPN tunnel that isn't working *quite* as well as we'd
hoped.<br>
<br>
First, here's our technical details:<br>
<br>
The OpenVPN server (v2.3.4-5+deb8u1) is a Debian 8 box behind
a NAT router. The router has UDP port 1194 forwarded to our
server. This server also runs our office Asterisk PBX, so
there isn't any networking hardware or firewall between the
VPN tunnel and the Asterisk PBX.<br>
</blockquote>
<div> </div>
<div> </div>
<div>Asterisk maybe replying from the TUN address which may
confuse your sip client - if you set the TUN address as a
proxy that seems to solve it. If asterisk is bound to every
address then implicitly it shouldn't matter where it replies
from, but in the openvpn case it seems to reply from a
different address to the one it was called on and that can
definitely fool clients. tcpdump on the tunnel can help you
see whats happening</div>
<div> </div>
</div>
</blockquote>
<br>
I think I'll need a bit more detail about how to set the TUN address
as a proxy. Is this done on the OpenVPN server, or at the client
end? I'm also going to tell Asterisk to bind to all IPs and then
restart it when there's no calls in progress, perhaps that's all I
need to do?<br>
</body>
</html>