Hi All, I know, IAX is NAT friendly, but... I have a problem running gnophone from a box behind NAT firewall. I can register gnophone with * through NAT, but when I try to make a call it instantly disconnects. CLI iax show peers command tells me that peer is unreachable. However this peer is registred. Gnophone also tells me that it is registred. It seems that registration handshake has happened, but nothing else work. The same configuration without NAT in between works like a charm. Thank you _________________________________________________________________ Add photos to your messages with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail
What NAT box are you using? We had a similar problem with LinkSys BEFSR41's. It could register, but couldn't deal with the audio (RTP) traffic. The latest firmware fixed the issue in this case. -wade> -----Original Message----- > From: Serge Mankovski [mailto:dorjegonpo@hotmail.com] > Sent: Monday, September 08, 2003 6:42 PM > To: asterisk-users@lists.digium.com > Subject: [Asterisk-Users] Help needed with IAX behind NAT > > Hi All, > I know, IAX is NAT friendly, but... I have a problem running gnophonefrom> a > box behind NAT firewall. > > I can register gnophone with * through NAT, but when I try to make acall> it > instantly disconnects. CLI > iax show peers command tells me that peer is unreachable. However this > peer > is registred. Gnophone also tells me that it is registred. > > It seems that registration handshake has happened, but nothing elsework.> > The same configuration without NAT in between works like a charm. > > Thank you > > _________________________________________________________________ > Add photos to your messages with MSN 8. Get 2 months FREE*. > http://join.msn.com/?page=features/featuredemail > > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users
I do not really know what firewall is there. Is is some sort of firewall used for corporations. I convinced our sysamin to open one UDP port for two-way traffic. Before that there was no registration at all. Thanks Serge>From: "Wade J. Weppler" <weppler@wwworks-inc.com> >Reply-To: asterisk-users@lists.digium.com >To: <asterisk-users@lists.digium.com> >Subject: RE: [Asterisk-Users] Help needed with IAX behind NAT >Date: Mon, 8 Sep 2003 18:56:42 -0400 > >What NAT box are you using? > >We had a similar problem with LinkSys BEFSR41's. It could register, but >couldn't deal with the audio (RTP) traffic. > >The latest firmware fixed the issue in this case. > >-wade > > > -----Original Message----- > > From: Serge Mankovski [mailto:dorjegonpo@hotmail.com] > > Sent: Monday, September 08, 2003 6:42 PM > > To: asterisk-users@lists.digium.com > > Subject: [Asterisk-Users] Help needed with IAX behind NAT > > > > Hi All, > > I know, IAX is NAT friendly, but... I have a problem running gnophone >from > > a > > box behind NAT firewall. > > > > I can register gnophone with * through NAT, but when I try to make a >call > > it > > instantly disconnects. CLI > > iax show peers command tells me that peer is unreachable. However this > > peer > > is registred. Gnophone also tells me that it is registred. > > > > It seems that registration handshake has happened, but nothing else >work. > > > > The same configuration without NAT in between works like a charm. > > > > Thank you > > > > _________________________________________________________________ > > Add photos to your messages with MSN 8. Get 2 months FREE*. > > http://join.msn.com/?page=features/featuredemail > > > > _______________________________________________ > > Asterisk-Users mailing list > > Asterisk-Users@lists.digium.com > > http://lists.digium.com/mailman/listinfo/asterisk-users >_______________________________________________ >Asterisk-Users mailing list >Asterisk-Users@lists.digium.com >http://lists.digium.com/mailman/listinfo/asterisk-users_________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
You need to make sure that the RTP traffic is passing through. This sounds like your problem. Ports are specified in rtp.conf -wade> -----Original Message----- > From: Serge Mankovski [mailto:dorjegonpo@hotmail.com] > Sent: Monday, September 08, 2003 7:37 PM > To: asterisk-users@lists.digium.com > Subject: RE: [Asterisk-Users] Help needed with IAX behind NAT > > I do not really know what firewall is there. Is is some sort offirewall> used for corporations. I convinced our sysamin to open one UDP portfor> two-way traffic. Before that there was no registration at all. > > Thanks > Serge > > > >From: "Wade J. Weppler" <weppler@wwworks-inc.com> > >Reply-To: asterisk-users@lists.digium.com > >To: <asterisk-users@lists.digium.com> > >Subject: RE: [Asterisk-Users] Help needed with IAX behind NAT > >Date: Mon, 8 Sep 2003 18:56:42 -0400 > > > >What NAT box are you using? > > > >We had a similar problem with LinkSys BEFSR41's. It could register,but> >couldn't deal with the audio (RTP) traffic. > > > >The latest firmware fixed the issue in this case. > > > >-wade > > > > > -----Original Message----- > > > From: Serge Mankovski [mailto:dorjegonpo@hotmail.com] > > > Sent: Monday, September 08, 2003 6:42 PM > > > To: asterisk-users@lists.digium.com > > > Subject: [Asterisk-Users] Help needed with IAX behind NAT > > > > > > Hi All, > > > I know, IAX is NAT friendly, but... I have a problem runninggnophone> >from > > > a > > > box behind NAT firewall. > > > > > > I can register gnophone with * through NAT, but when I try to makea> >call > > > it > > > instantly disconnects. CLI > > > iax show peers command tells me that peer is unreachable. Howeverthis> > > peer > > > is registred. Gnophone also tells me that it is registred. > > > > > > It seems that registration handshake has happened, but nothingelse> >work. > > > > > > The same configuration without NAT in between works like a charm. > > > > > > Thank you > > > > > > _________________________________________________________________ > > > Add photos to your messages with MSN 8. Get 2 months FREE*. > > > http://join.msn.com/?page=features/featuredemail > > > > > > _______________________________________________ > > > Asterisk-Users mailing list > > > Asterisk-Users@lists.digium.com > > > http://lists.digium.com/mailman/listinfo/asterisk-users > >_______________________________________________ > >Asterisk-Users mailing list > >Asterisk-Users@lists.digium.com > >http://lists.digium.com/mailman/listinfo/asterisk-users > > _________________________________________________________________ > Protect your PC - get McAfee.com VirusScan Online > http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 > > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users
That explains why it's so much simpler to work with... Thanks for clarification Eric! -wade> -----Original Message----- > From: Eric Wieling [mailto:eric@fnords.org] > Sent: Monday, September 08, 2003 10:25 PM > To: asterisk-users@lists.digium.com > Subject: RE: [Asterisk-Users] Help needed with IAX behind NAT > > IAX doesn't use RTP. All voice and control data goes via the one UDP > port. > > On Mon, 2003-09-08 at 21:17, Wade J. Weppler wrote: > > You need to make sure that the RTP traffic is passing through. This > > sounds like your problem. > > > > Ports are specified in rtp.conf > > > > -wade > > > > > > > -----Original Message----- > > > From: Serge Mankovski [mailto:dorjegonpo@hotmail.com] > > > Sent: Monday, September 08, 2003 7:37 PM > > > To: asterisk-users@lists.digium.com > > > Subject: RE: [Asterisk-Users] Help needed with IAX behind NAT > > > > > > I do not really know what firewall is there. Is is some sort of > > firewall > > > used for corporations. I convinced our sysamin to open one UDPport> > for > > > two-way traffic. Before that there was no registration at all. > > > > > > Thanks > > > Serge > > > > > > > > > >From: "Wade J. Weppler" <weppler@wwworks-inc.com> > > > >Reply-To: asterisk-users@lists.digium.com > > > >To: <asterisk-users@lists.digium.com> > > > >Subject: RE: [Asterisk-Users] Help needed with IAX behind NAT > > > >Date: Mon, 8 Sep 2003 18:56:42 -0400 > > > > > > > >What NAT box are you using? > > > > > > > >We had a similar problem with LinkSys BEFSR41's. It couldregister,> > but > > > >couldn't deal with the audio (RTP) traffic. > > > > > > > >The latest firmware fixed the issue in this case. > > > > > > > >-wade > > > > > > > > > -----Original Message----- > > > > > From: Serge Mankovski [mailto:dorjegonpo@hotmail.com] > > > > > Sent: Monday, September 08, 2003 6:42 PM > > > > > To: asterisk-users@lists.digium.com > > > > > Subject: [Asterisk-Users] Help needed with IAX behind NAT > > > > > > > > > > Hi All, > > > > > I know, IAX is NAT friendly, but... I have a problem running > > gnophone > > > >from > > > > > a > > > > > box behind NAT firewall. > > > > > > > > > > I can register gnophone with * through NAT, but when I try tomake> > a > > > >call > > > > > it > > > > > instantly disconnects. CLI > > > > > iax show peers command tells me that peer is unreachable.However> > this > > > > > peer > > > > > is registred. Gnophone also tells me that it is registred. > > > > > > > > > > It seems that registration handshake has happened, but nothing > > else > > > >work. > > > > > > > > > > The same configuration without NAT in between works like acharm.> > > > > > > > > > Thank you > > > > > > > > > >_________________________________________________________________> > > > > Add photos to your messages with MSN 8. Get 2 months FREE*. > > > > > http://join.msn.com/?page=features/featuredemail > > > > > > > > > > _______________________________________________ > > > > > Asterisk-Users mailing list > > > > > Asterisk-Users@lists.digium.com > > > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > > >_______________________________________________ > > > >Asterisk-Users mailing list > > > >Asterisk-Users@lists.digium.com > > > >http://lists.digium.com/mailman/listinfo/asterisk-users > > > > > > _________________________________________________________________ > > > Protect your PC - get McAfee.com VirusScan Online > > > http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 > > > > > > _______________________________________________ > > > Asterisk-Users mailing list > > > Asterisk-Users@lists.digium.com > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > _______________________________________________ > > Asterisk-Users mailing list > > Asterisk-Users@lists.digium.com > > http://lists.digium.com/mailman/listinfo/asterisk-users > -- > BTEL Consulting > 850-484-4535 x2111 (Office) > 504-595-3916 x2111 (Experimental) > 877-552-0838 (Backup Phone) > > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users
Darren McIntosh
2003-Sep-09 03:17 UTC
[Asterisk-Users] RE: Help needed with IAX behind NAT
<snip> In this configuration I had to forward the iax port on both NAT boxes to the * box. 192.168.0.100 -NAT1-> publicIP <-> publicIP -> NAT2 192.168.0.100 It wasn't sufficient to register from one * box to the other to get audio working because the source port was different. * was version 0.4.0 and the NAT box was netbsd/ipfilter 3.4.27 in this case. If things haven't changed too much, might be your problem, can your firewall admin forward iax ports to your gnophone? cheers, darrenmc