similar to: Binding to specific IPs/ports

With openssh, i can use -L x:y:z to forward a local port x to the remote host y's port z. If the sshd server has more than one IP, is there a way to specify which it binds to when forwarding the connection? If not, this may be a feature you should consider adding? -- -*% % % % % % % % % % % % % % % % *- -* xercist *- -* xercist at mindless.com *- -* % % % % % %

I've just realised that when a user uses ssh to connect to a machine, then sets up a port forward and uses it, the resulting connection is reported by identd as belonging to root. While I realise ident is not any kind of secure authentication, it doesn't make much sense to make it even less so by letting any user create connections reported to be made by root. The sshd should drop all

Hi George, Thank you for the response. I'm a little unclear on what you mean by a transport. We're using chan_sip, not pjsip. Do you mean a device in sip.conf, using bindaddr to set the address to bind for that device? We've only used bindaddr in the [general] section before, but if it will work in a device that could be the answer. On Fri, 23 Oct 2020 at 00:13, George Joseph

I'm using Asterisk on a open server (no firewall or NAT) and trying to communicate with a Grandstream BudgeTone 102 SIP phone which is behind NAT. The BudgeTone is at firmware level 1.0.4.30 and Asterisk is from CVS about a week ago. My problem is that I'm only getting half-duplex communication -- I can hear voice from the Asterisk server but the server does not understand any voice from

Hello, We have an Asterisk server with two public IP addresses, let's say 1.1.1.1 and 2.2.2.2. Normally calls come in to 1.1.1.1 and are bridged with a call dialled from Asterisk to an external destination. The external destination sees the SIP packet as coming from 1.1.1.1 and the media address in the SDP is 1.1.1.1, which is great. However if we receive a call in to 2.2.2.2 then the call

thank you very much. this is exactly whats needed for debug example output for your info [Dec 12 15:39:19] DEBUG[2182][C-00000000]: pjproject: <?>:         icess0x7f5d44081e88 .Added new remote candidate from the request: 2.2.2.2:57536 [Dec 12 15:39:19] DEBUG[2182][C-00000000]: pjproject: <?>:         icess0x7f5d44081e88 .New triggered check added: 1 [Dec 12 15:39:19]

OK, thank you George. On Sat, 24 Oct 2020 at 03:16, George Joseph <gjoseph at digium.com> wrote: > > > On Thu, Oct 22, 2020 at 4:13 PM David Cunningham < > dcunningham at voisonics.com> wrote: > >> Hi George, >> >> Thank you for the response. I'm a little unclear on what you mean by a >> transport. We're using chan_sip, not pjsip.

Why not use OpenSips/Kamailoo in between? Where you want 1.1.1.1 you pass it along as is. Where you want 2.2.2.2 change the sdp in opensips/kamailio On Thu, Oct 29, 2020 at 20:44 David Cunningham <dcunningham at voisonics.com> wrote: > Hello, > > Does anyone know a way with chan_sip to tell Asterisk to use a specific IP > address for its end of the communication for a specific

Asterisk is on public IP (as described in the first email) i have 10 years experience in voip, 4 years webrtc in production. i know about ICE/STUN/DTLS-SRTP. yes, not every detail but the basic mechanism but i confess. i dont understand WHY Asterisk SOMETIMES switches destination IP in RTP. this is not only about ICE. its about RTP engine too which is Asterisk specific and Asterisk DEBUG is

with wireshark i need decrypt traffic every call which is time consuming. get debug from pjnat through asterisk is not possible because of technical reasons or nobody did it? in my case its strange that ice candidates are the same good call v=0 o=- 3669976329745317845 2 IN IP4 127.0.0.1 s=- t=0 0 a=msid-semantic: WMS EoNIdKcMZvWBLULGqGPJTDe12ujjFEemeapo m=audio 52421 RTP/SAVPF 8 0 101 c=IN

Hi developer, i got a problem and need your help!(my english not very good) My KVM host in IDC, and there are some restrict in there lead to me connect to KVM host by port 22 or 16509 impossible. In generally If i want login my KVM host i must login in to a "stepping stones" first, then login to that KVM host.( Now assume that the KVM host ip is 1.1.1.1 and the "stepping

Hello, On my systems i use shorewall 3.2.6. Now all systems where replace by new ones with new ip''s. So i tried with DNAT to map the old ip''s to the new one as long as DNS is updated. But i didn''t get it work. I see in tcpdump that a connect from client-ip to new-server-ip is done while connection the old on. But i get no response. Did i configure something in the

ARGH! I am at a complete loss as to which OGG quality settings to use: 8? 10? 3? I'd like to be able to listen to my primarily Rock oriented music on a high-end system (though I don't own one - yet) without any noticeable sound degradation, but I don't want to go total overkill with -q 10. With LAME, I at least used to know 192 kbps with -q0 was a perfect size/quality proportion. I

Hello, I have been reading through the documentation and trying to set up a very small VPN as a test for a larger rollout that I would like to complete in the future but cannot get this working. The configuration seems like it should be relatively simple, so I'm most likely missing something basic but I just cannot see what I'm doing wrong. At the moment I am trying to get this working

I am trying to get a tunnel from a cisco 1760 with IOS 12.2.15.t13 to a freebsd 4.9 install with racoon. I have package version freebsd-20040408a and internal version 20001216 in my log file. I posted the full racoon and cisco log below my configs. Racoon keeps saying: 2004-07-26 16:24:03: DEBUG: isakmp.c:2295:isakmp_printpacket(): begin. 2004-07-26 16:24:03: DEBUG:

On 02/03/2015 11:19 AM, Jay Leafey wrote: > The documentation says that you can just put "vnc" (or > "vncconnect={host}") in the kickstart file in the command section and > proceed from there. Here's a link to an article in Red Hat Magazine > that has a pretty good overview: > >> http://www.redhat.com/magazine/024oct06/features/kickstart/ > > As

Hi. I'm using nologin with own reason [1]. That works fine. For example pop3 client gets nice message like "-ERR [AUTH] Account is locked. Please contact support." Unfortunately maillog lacks information details about why user was not allowed to log in. pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<testuser>, method=LOGIN, rip=1.1.1.1, lip=2.2.2.2,

hi After compiling and installing pwlib and openh323 , the asterisk, give the folloing error. please tell me where the problem is ? Best Mani *CLI> -- Executing Dial("SIP/2.2.2.2-086f5ac0", "H323/652#150388590962@1.1.1.1|60") in new stack Mar 28 14:17:23 WARNING[11985]: channel.c:2576 ast_request: No translator path exists for channel type H323 (native 4) to 256 Mar 28

https://bugzilla.netfilter.org/show_bug.cgi?id=887 Summary: iptables.xslt wrong "match" -m handling Product: iptables Version: 1.4.x Platform: All OS/Version: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: unknown AssignedTo: netfilter-buglog at lists.netfilter.org

On Sat, June 18, 2016 18:39, Gordon Messmer wrote: > On 06/18/2016 02:49 PM, James B. Byrne wrote: >> On Fri, June 17, 2016 21:40, Gordon Messmer wrote: >>> https://letsencrypt.org/2015/11/09/why-90-days.html >> With respect citing another person's or people's opinion in support >> of >> your own is not evidence in the sense I understand the word to