search for: nat

Hi i have a debian box working as a router.. it works quite well, now i want to give more than 1 ip.. is it possible to do it? some of them must be an open ip.. i mean.. all ports opened is it possible? how should i do it? Here is my nat.sh script just in case someone wants it.. (comments r in spanish.. and not right) Thanks in advance, #!/bin/sh echo "AthoS LaN Generando iptables..." > /dev/tty12 #limpiamos las tablas de iptables iptables -F iptables -t nat -F iptables -t filter -F #eth1 sera la interfaz de int...

Hi, Ok.. I know dual NAT is a problem for SIP.. ie. UA - NAT - Internet - NAT - Asterisk What about Multi-NAT where a dedicated public IP is mapped to the private IP of the asterisk box.. ie UA - NAT - Internet - Multi-NAT - Asterisk http://www.draytek.co.uk/support/kb_vigor_multinat.html Anyone tried it? Thanks..

I've been lurking on the dev discussion on creating nat=auto. It all leads me to think there's no reason to use nat=no. We have about 60 internal sip extensions connected to an multihomed asterisk box where the external ip is not nat'ed. Each of the internal sip contexts has nat=no. On startup I get a slew of warnings about intruders being...

Asterisk Project Security Advisory - AST-2011-013 Product Asterisk Summary Possible remote enumeration of SIP endpoints with differing NAT settings Nature of Advisory Unauthorized data disclosure Susceptibility Remote unauthenticated sessions Severity Minor Exploits Known...

https://bugzilla.netfilter.org/show_bug.cgi?id=1213 Bug ID: 1213 Summary: Nft stateless NAT (NOTRACK) Product: nftables Version: unspecified Hardware: All OS: Ubuntu Status: NEW Severity: critical Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: mskim128 at gm...

...et/ipv4/conf/*/rp_filter; do # /usr/bin/echo 0 > $i # done ############################################################################### ############################################################################### # vamos levantar os "probs" no firewall modprobe ip_nat_ftp modprobe ip_conntrack modprobe ip_conntrack_ftp ############################################################################### ############################################################################### set ipexterno = `ifconfig eth0|grep inet|head -1|awk '{print $3}'` set ipintern...

Hi everyone, I decided to have a look at SIP & NAT again and I've been at it for a [quite a] few hours but typically nothing is working for me. Actually I'm not sure if SIP and NAT can ever work but some emails on this list do suggest that someone has got it working, once, maybe. I'm experimenting with a ZyXEL 2000W [WiFi Sip phone...

Should the following setup work? SIP UA---NAT---Internet---NAT---SIP UA If both UA's support STUN and report the external IP address in the SIP packet.. I am trying to get away from using canreinvite=no so that traffic can go directly between the UA's and not via the central server but I can't seem to get it to work.. Has any...

This is somewhat related to my other query on the list regarding NAT traversal. I have heard many times that IAX is "NAT-transperant". I am unsure how it accomplishes this. I do know that SIP works like this: your SIP device send a request to the SIP server (usually on port 5060) with whatever command. The SIP server respends to your device's "a...

I've got a Sipura SPA-1001 that I'm trying to get working with an Asterisk server that's on the public Internet, while the SPA-1001 is behind NAT. I did the first obvious thing and mapped ports 5060 and 10000 - 30000 to the local IP address of the SPA-1001. Tried numerous proxy settings, have all the NAT settings == yes. Registration seems to be happening; with sip debug on, I see it get an OK and sip show peers shows it on the list. Bu...

I'm at my wit's end! I've spent 2 days now trying to get what I thought was a very simply SIP + NAT arrangement working. I've trawled the web and picked brains, but nothing anyone suggests work. My setup is very simple. I have a * server in a datacentre, with a public IP address. There is no firewall in place, it's completely open (at least, as far as I'm concerned). I then have, in...

...[May 27 15:52:33] WARNING[2306] chan_dahdi.c: Ignoring any changes to 'hasiax' (on reload) at line 39. [May 27 15:52:33] WARNING[2306] chan_dahdi.c: Ignoring any changes to 'hasmanager' (on reload) at line 47. [May 27 15:52:33] WARNING[2306] chan_sip.c: !!! PLEASE NOTE: Setting 'nat' for a peer/user that differs from the global setting can make [May 27 15:52:33] WARNING[2306] chan_sip.c: !!! the name of that peer/user discoverable by an attacker. Replies for non-existent peers/users [May 27 15:52:33] WARNING[2306] chan_sip.c: !!! will be sent to a different port than repl...

...very responsive either. My apologies if you've tried to contact me and I did not reply quickly or at all. So to cover up (can't report on what is happening :-) I dedicate this issue of Asterisk Sunday News to the Asterisk SIP channel. Inside you'll find more information on why SIP and NAT doesn't really work as clockwork, as well as some other notes. This week's topics: ------------------- * A new mailing list: Asterisk-BSD * AST_DATA: Now on the bug tracker * Theme: SIP and NAT - what is the problem, really? ------------------------------------------------- ** One way...

Hi All; I succeeded to have a success call from Polycom behind NAT while Asterisk has public IP address, but I was not able to have a succeed call (it was established, but no voice running, and then the call disconnected) if Asterisk behind NAT and Polycom behind NAT. When Asterisk behind NAT and Polycom behind NAT, I forwarded the 5060 UDP to asterisk (at asteri...

Hi All, I have a Polycom 501 that is behind a NAT. When it registers to the Asterisk server it is using the IP address on the private network and not the public IP of the NAT address. Can someone tell me what I need to do so the phone registerers using an internet address rather than the remote network NAT address. -------------- next par...

Hi Ray, I was wondering if the "qualify" option is used [in sip.conf] to keep a connection (from the SIP phone inside the firewall to the Asterisk server outside the firewall) open then would the firewall not allow two way communication without incoming port mapping/NAT (providing that the SIP phone started "talking" first)? I'm not sure about that - I'm being hopeful though :) STUN would be very acceptable to me if it worked though ;) Derek razza wrote: >Derek, >I'm not an expert in these area's hence the offer to play, but i...

I know that NAT is something no one really likes to talk about, but does anyone know how work with it elegantly? There are many providers which deal with it on a daily basis in fact they cater to it, is this possible to do with asterisk or does it require other exotic setups? I even know of a provider which uses...

Hello, Are there any good alternatives to the network-nat script on Debian Squeeze? I have tried using (network-script network-nat) and (vif-script vif-nat), but I end up with an error message like Error: Device 1 (vif) could not be connected. ip addr add 10.0.1.259 dev vif4.1 failed with configuration file directive vif =[ '...

Hi guies, I know I know this subject have been The most written subject about VoIP Right... but I just want to make clear, just one time ! If Asterisk is on a Public IP Address and a softphone behind the nat, sip.conf must contains for this phone: nat=yes .... Now if I want to configure my sipphone (X-Lite) placing behing the NAT, it must have in "Domain/Realm" the external IP address? If Asterisk is behind the NAT, sip.conf must have in [globals] externip = <External IP address> lo...

Hi, everyone, We've been reasonably happy with Polycom SoundPoint phones, but we only have them installed on the LAN. I've read that they have problems working across NAT. So ... I guess I have a few questions. First, is there a way to get Polycoms to work well over NAT? If not, then are there phones of comparable voice quality that do work well over NAT? Without costing a lot more? Thanks! Jen