Hello my isp has blocked outgoing and incoming connection for port 5060 . I have ssh access to server so i want to send all traffic from port 5091 to port 5060 of asterisk .so i tried iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5091 -j DNAT --to 127.0.0.1:5060 Now my softphone is able to register with asterisk but it isnt able to make any calls . bindport = 5091 in my sip.conf under extensions is not working .. asterisk doesnt listen to port 5091 .. but if i put in general section of sip.confthen it works but then asterisk wont listen on 5060 . How can i use iptables in this situation ? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20061215/1508ae35/attachment.htm
Mail list wrote:> Hello my isp has blocked outgoing and incoming connection for port 5060 > . I > have ssh access to server so i want to send all traffic from port 5091 to > port 5060 of asterisk .so i tried > > iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5091 -j DNAT --to > 127.0.0.1:5060 > > Now my softphone is able to register with asterisk but it isnt able to make > any calls . > > bindport = 5091 in my sip.conf under extensions is not working .. asterisk > doesnt listen to port 5091 .. but if i put in general section of > sip.confthen it works but then asterisk wont listen on 5060 . How can > i use iptables > in this situation ? > > > ------------------------------------------------------------------------ > > _______________________________________________ > --Bandwidth and Colocation provided by Easynews.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-usersRTP ports blocked? (rtp.conf) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20061215/1dbd9d06/signature.pgp
Are you in the US? If so, such blocking is not legal, and you should file a complaint with the FCC John Novack Mail list wrote:> Hello my isp has blocked outgoing and incoming connection for port > 5060 . I have ssh access to server so i want to send all traffic > from port 5091 to port 5060 of asterisk .so i tried > > iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5091 -j DNAT --to > 127.0.0.1:5060 <http://127.0.0.1:5060> > > Now my softphone is able to register with asterisk but it isnt able to > make any calls . > > bindport = 5091 in my sip.conf under extensions is not working .. > asterisk doesnt listen to port 5091 .. but if i put in general section > of sip.conf then it works but then asterisk wont listen on 5060 . How > can i use iptables in this situation ? > ------------------------------------------------------------------------ > > _______________________________________________ > --Bandwidth and Colocation provided by Easynews.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >
well that should map incoming packets to 5091 to 5060, but may not rewrite [new] outbound packets from 5060 to 5091, which your isp may be blocking. an iptables SNAT or MASQUERADE might help you there. i'm not positive on if this would be needed or not. more importantly, however, if your isp is blocking all outgoing traffic to 5060, it won't get to your softphone anyway, unless you also configure that end to also not use 5060. and if you're reconfiguring ports on the softphone end anyway, why not just put 5091 in there, 5091 in sip.conf's bindport, and not mess with iptables at all? another option might be that your isp is blocking rtp as well. can you see what the asterisk console is doing when you attempt such calls? and/or tcpdump? -tcl. On Sat, 16 Dec 2006, Mail list wrote:> Hello my isp has blocked outgoing and incoming connection for port 5060 . I > have ssh access to server so i want to send all traffic from port 5091 to > port 5060 of asterisk .so i tried > > iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5091 -j DNAT --to > 127.0.0.1:5060 > > Now my softphone is able to register with asterisk but it isnt able to make > any calls . > > bindport = 5091 in my sip.conf under extensions is not working .. asterisk > doesnt listen to port 5091 .. but if i put in general section of > sip.confthen it works but then asterisk wont listen on 5060 . How can > i use iptables > in this situation ? >
I am sure rtp ports arent blocked .. On 16/12/06, Derek Whitten <derek@kfuq.net> wrote:> > Mail list wrote: > > Hello my isp has blocked outgoing and incoming connection for port 5060 > > . I > > have ssh access to server so i want to send all traffic from port 5091 > to > > port 5060 of asterisk .so i tried > > > > iptables -t nat -A PREROUTING -i eth0 -p udp --dport 5091 -j DNAT --to > > 127.0.0.1:5060 > > > > Now my softphone is able to register with asterisk but it isnt able to > make > > any calls . > > > > bindport = 5091 in my sip.conf under extensions is not working .. > asterisk > > doesnt listen to port 5091 .. but if i put in general section of > > sip.confthen it works but then asterisk wont listen on 5060 . How can > > i use iptables > > in this situation ? > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > --Bandwidth and Colocation provided by Easynews.com -- > > > > asterisk-users mailing list > > To UNSUBSCRIBE or update options visit: > > http://lists.digium.com/mailman/listinfo/asterisk-users > > > RTP ports blocked? > > (rtp.conf) > > > > _______________________________________________ > --Bandwidth and Colocation provided by Easynews.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users > > > >-------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20061215/9ec83266/attachment.htm