search for: publicip

.... Here is a snipet from the new system we are trying to connect in (from the /var/log/tinc.log file) 2018-03-15 22:57:26 tinc.NETNAME[871]: Read packet of 74 bytes from Linux tun/tap device (tun mode) 2018-03-15 22:57:26 tinc.NETNAME[871]: Sending packet of 74 bytes to pfsense201 (PFSENSE201-PUBLICIP port 655) 2018-03-15 22:57:31 tinc.NETNAME[871]: Read packet of 74 bytes from Linux tun/tap device (tun mode) 2018-03-15 22:57:31 tinc.NETNAME[871]: Sending packet of 74 bytes to pfsense201 (PFSENSE201-PUBLICIP port 655) 2018-03-15 22:57:35 tinc.NETNAME[871]: Got KEY_CHANGED from pfsense201 (PFS...

...e1 list ConnectTo=pfsense19 list ConnectTo=pfsense7 list ConnectTo pfsense26 list ConnectTo pfsense27 list ConnectTo pfsense100 option Name pfsense16 config tinc-host pfsense20 option enabled 1 option net NETNAME list Address {PUBLICIPHERE for this site} option Subnet 172.16.20.0/24 config tinc-host pfsense7 option enabled 1 option net NETNAME list Address {PUBLICIPHERE for this site} option Subnet 172.16.7.0/24 config tinc-host pfsense19 option enabled 1 option net NETNA...

...r end after the call is picked up. I was wondering if you can tell me what a minimal configuration for Asterisk on EC2 looks like. My current pjsip.conf configuration looks like this: type=transport protocol=udp bind=0.0.0.0 local_net=172.31.32.0/20 ; In the following two lines, replace "<publicIP>" with the output of ; curl -s http://169.254.169.254/latest/meta-data/public-ipv4 external_media_address=<publicIP> external_signaling_address=<publicIP> [endpoint_internal](!) type=endpoint context=from-internal disallow=all allow=ulaw direct_media=no [auth_userpass](!) type...

...I found the issue. The key is to add rtp_symmetric=yes Here's what my final configuration looks like: [transport-udp] type=transport protocol=udp bind=0.0.0.0 ;; for within EC2 local_net=172.31.32.0/20 ;; For softphones within EC2 local_net=192.168.1.0/24 external_media_address=<publicIPOfEC2Instance> external_signaling_address=<publicIPOfEC2Instance> ;Templates for the necessary config sections [endpoint_internal](!) type=endpoint context=from-internal disallow=all allow=!all,ulaw direct_media=no rtp_symmetric=yes On Thu, Mar 5, 2015 at 5:52 PM, Sonny Rajagop...

...the SPA921 to our Asterisk box works fine - though I had to open the firewall for UDP traffic on port 10000-20000. Calling from our Asterisk to the SPA921 doesn't work. I'm guessing this is due to the NAT/firewall on the other side, coz' how would it know that UDP-traffic to <SPA publicIP>:5060 needs to be delivered to <192.168.x.x:5060> ? /Per Jessen, Z?rich -- http://www.spamchek.com/ - your spam is our business.

...5 Reachability: none, forwarded via NodeA NodeA and NodeB itself have NodeB's public IP address in the Address line in the host/key file for NodeB, and LocalDiscovery is in operation on the 192.168.1.x LAN behind the firewall, some other nodes are actually there too. Node B is reachable on the publicIP from the LAN (Nat reflection is in operation) Is there a way to force NodeA or NodeB to "advertise" it's public IP to the rest of the tinc network, or did I miss something really obvious? Thanks! Keith.

Hi All, I know, IAX is NAT friendly, but... I have a problem running gnophone from a box behind NAT firewall. I can register gnophone with * through NAT, but when I try to make a call it instantly disconnects. CLI iax show peers command tells me that peer is unreachable. However this peer is registred. Gnophone also tells me that it is registred. It seems that registration handshake has

...in the C-Z group to be able to find Node B > on it's public IP and therefore not forward via NodeA, but I would like > to be able to do this without having to distribute NodeBs host key file > with an Address = line to every node in the C-Z group. [...] > Node B is reachable on the publicIP from the LAN (Nat reflection is in > operation) The problem is getting the information about NodeB's public IP address to the other nodes. Since you have NAT reflection working, the easiest way is for NodeA and NodeB to connect to each other using their public IP address. This will cause th...

...case of a problem on one of the ISP's line. Is it a way in 1.4 to do the same but with only one Asterisk instance? First problem we see is that externalip in sip.conf can be fixed for only one IP. Second is, if we could put 2 external IP's, if one packet is going out with, let's say PublicIP#1, and at this time the link from this ISP is down, packets will -helped by external routing- go out through the second line but never come back. Does someone knows an Asterisk solution for this? -- Daniel

...ut both set of rules on, it doesn't work. below are my set of rules. Can anyone tell me a how this can be done? Here is the setup. mynetwork 172.31.0.0/21 eth0 172.31.4.254 my network interface eth1 192.168.14.1 interface to downtown which on that network's side routes to 10.0.0.0/9 eth2 publicIP to the internet publicnetwork.100 is the virtual address on eth2 called eth2:100 172.31.5.100 is the private ip address of the server I want reached 192.168.14.10 is the virtual ip address on eth1 called eth1:10 $IPT -t nat -A PREROUTING -d publicnetwork.100 -j DNAT --to-destination 172.31.5.100...

I'm getting lost ... Running two NICs - no problem. But trying to screw down the rules a bit and getting lost on passing the www - or port 80, through the firewall both waqys. There are WebServers - real and virtual, on the inside interface, with their own PublicIP. I'm not using the OutsideInterface as their web address, as I'm using my own DNS etc. So, in rc.firewall, what do I put in place so that everything can see my webserver on the inside interface, and also, the workstations on the inside network can see the internet... This works fine:...

...d via NodeA > > NodeA and NodeB itself have NodeB's public IP address in the Address > line in the host/key file for NodeB, and LocalDiscovery is in operation > on the 192.168.1.x LAN behind the firewall, some other nodes are > actually there too. > Node B is reachable on the publicIP from the LAN (Nat reflection is in > operation) > > Is there a way to force NodeA or NodeB to "advertise" it's public IP to > the rest of the tinc network, or did I miss something really obvious? > > > Thanks! > > > Keith. > > > > ____...

...y: P5 Component: nft Assignee: pablo at netfilter.org Reporter: e.lohmann at mdex.de I would like to put rules like this into a map. But there is no command (set) to use the map in raw, like we do it in STATEFULL with dnat / snat. nft add rule raw PREROUTING ip daddr *publicIP* counter notrack ip daddr set *privateIP* nft add rule raw PREROUTING ip saddr *privateIP* counter notrack ip saddr set *publicIP* I do this in STATEFULL with: dnat to ip daddr map @pubip_pre snat to ip saddr map @pubip_post Open for any discussion and questions, thanks in forward, eike. -- Y...

...c0 > >PrivateKeyFile=C:\PROGRAM FILES\tinc\Home\rsa_key.priv > >Mode=router > >KeyExpire=3600 > >AddressFamily=ipv4 > >ProcessPriority=normal > >PingTimeOut=5 > >PingInterval=60 > > > >C:\PROGRAM FILES\tinc\Home\hosts\Home > >Address=home.publicip.net > >Subnet=10.0.0.1/32 > >Subnet=192.168.1.0/24 > > > >-----BEGIN RSA PUBLIC KEY----- > >xxx > >-----END RSA PUBLIC KEY----- > > > >C:\PROGRAM FILES\tinc\Home\hosts\company > >Address=company > >Subnet=10.0.0.2/32 > >Subnet=192....

...tworking for them is fine, so there''s no general networking problem. I use the xen 3.2 packages for CentOS on CentOS 5.1. There was a public IP address on eth0 and a private IP address on eth0:0. I changed that around after I discovered with tcpdump that dhcpd was replying on eth0 like publicip.bootps -> privateip.bootpc. This isn''t a problem for all other packets, but apparently for DHCP. Bridging is setup with the standard Xen 3.2 network-bridge script by xend like this: bridge name bridge id STP enabled interfaces eth0 8000.000c6e101f84...

...Windows 7 PC) C:\PROGRAM FILES\tinc\Home\Tinc.conf name=Home Interface=tinc0 PrivateKeyFile=C:\PROGRAM FILES\tinc\Home\rsa_key.priv Mode=router KeyExpire=3600 AddressFamily=ipv4 ProcessPriority=normal PingTimeOut=5 PingInterval=60 C:\PROGRAM FILES\tinc\Home\hosts\Home Address=home.publicip.net Subnet=10.0.0.1/32 Subnet=192.168.1.0/24 -----BEGIN RSA PUBLIC KEY----- xxx -----END RSA PUBLIC KEY----- C:\PROGRAM FILES\tinc\Home\hosts\company Address=company Subnet=10.0.0.2/32 Subnet=192.168.2.0/24 Subnet=192.168.3.0/24 -----BEGIN RSA PUBLIC KEY----- xxx -----END RSA...