asterisk users - Jul 2005 - Problem with BT100 behind iptables firewall

Greetings,

I am trying to get an IP phone working through a linux based iptables 
firewall.  I have an asterisk server with a public IP address.

I ran netcheck from FWD.  It says that it is a Port Restricted Nat.
I tried the recommended FWD approach, changing the FWD-specific settings
to the * server's.  I have tried every conveivable config on the phone 
(Yes to NAT traversal with STUN field blank, No to the same, outbound 
proxy as the same IP address as the * server, sending DTMF over the 
different choices...).

I have control over the iptables firewall, the phone and the * server.

I imagine this is a common setup.  Does anyone have any ideas?  Is there 
something I need to to on the * server or the firewall to allow it to be 
an outbound proxy?  Can someone point me to a website that shows example 
configs?  

Interestingly enough, Xlite works effortlessly behind the same firewall.
Also, I can get the phone to work with FWD, so I can only assume I need 
to do something on the * server.

Thanks in advance!

Pete Kleiner

> I am trying to get an IP phone working through a linux based iptables
> firewall.  I have an asterisk server with a public IP address.
 
> I ran netcheck from FWD.  It says that it is a Port Restricted Nat.
> I tried the recommended FWD approach, changing the FWD-specific settings
> to the * server's.  I have tried every conveivable config on the phone
> (Yes to NAT traversal with STUN field blank, No to the same, outbound
> proxy as the same IP address as the * server, sending DTMF over the
> different choices...).
> 
> I have control over the iptables firewall, the phone and the * server.
Do you have control over the firewall? Are you forwarding any ports
like 5060 to the phone?