similar to: NAT issues

Hello, I am playing around with IAX2 and I have encountered a problem trying to setup an asterisk box through NAT using IAX2. This is the problem: Asterisk box => Advanced Firewall => Internet => User's router => User The user can register, the server can answer, calls can be made. Asterisk box => Very simple router => Internet => User's router => User

Apart from religious grounds (!), is there any pros or cons why I should choose one over the other for a new install of asterisk ? Julian

https://bugzilla.netfilter.org/show_bug.cgi?id=1116 Bug ID: 1116 Summary: Can't create Ipv6 NAT entries with conntrack Product: conntrack-tools Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack Assignee:

I am currently running the following script on an internal machine to shape outbound ftp and email traffic. I am trying to move the script to my nat router (ipcop with 2 nic cards) so that it shapes the whole network and not only the outbound of 1 box. I have cable modem -> ipcop (eth1) >(eth0 - 192.168.1.1) > 192.168.1.100 and 192.168.1.101. The scripts works great running on

Hi I am having a problem with a DNAT rule where the packets being REJECT''d: DNAT:info net priv:192.168.6.15 udp 5060 With the following appearing in the log: Mar 6 11:59:30 ipcop kernel: Shorewall:net2fw:REJECT:IN=eth3 OUT= MAC=00:09:6b:6e:48:e8:00:1d:20:fa:46:90:08:00 SRC=71.216.136.25 DST=67.138.129.66 LEN=629 TOS=0x10 PREC=0xA0 TTL=50 ID=28000

Typically (or at least somewhat occasionally) after a reboot of my shorewall[-lite] machine I find that I end up with conntrack table entries for unNATted connections such as: # conntrack -L -p udp --dport 5060 -d 99.232.11.14 udp 17 59 src=10.75.22.8 dst=99.232.11.14 sport=5060 dport=5060 packets=5472 bytes=3031488 [UNREPLIED] src=99.232.11.14 dst=10.75.22.8 sport=5060 dport=5060 packets=0

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=41 Summary: pptp-conntrack-nat and sparc64 structures/padding/maskcomp bug Product: netfilter/iptables Version: patch-o-matic Platform: sparc64 OS/Version: All Status: NEW Severity: normal Priority: P2 Component: connection

Hello, I've been looking at the DialPlans by some poeple using Asterisk with SipGate, but the new Asterisk@home 1.0 allows you to create Outbound routes etc, does using the web admin give the same effects? When I add a SIP Trunk with my Sipgate settings and use a pattern of "8|." to place all calls with a 8 prefix tot he sipgate account the softphones dial the number, the Asterisk

I already understood that a packet enters chains in the ''nat'' table only if it is the _first_ packet of a connection. In that case, we may do SNAT in the POSTROUTING chain of the ''nat'' table. So, the packets arrive to the POSTROUTING chain of the ''mangle'' table with the source IP address changed (if it''s said by the rules of the

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=481 Summary: tun + pptp nat helper Product: conntrack Version: unspecified Platform: i386 OS/Version: All Status: NEW Severity: major Priority: P2 Component: conntrack AssignedTo: laforge@netfilter.org ReportedBy:

Hi, I have following setup: BT100 ---- Firewall/nat 1 (www.ipcop.org) ---- Internet ----Firewall/nat2 (Vigor) ---- Asterisk . I'd like to use BT100 as local extension to Asterisk. I've done simple setup and BT100 can call Asterisk and place outgoing calls. However I cannot set him to qualify, cause it is claimed as unreachable. I have port redirection at Firewall 1 (to 5060 and rtp

Hi, I am trying to use two products that use SysLinux and finally realised the SysLinux is the cause of my woes. I'm trying to use Freesco and IPCop. IPCop version 1.3 used a different boot loader to 1.4 which uses SysLinux. I have been through numerous trials and tribulations in trying to get Freesco to work but eventually gave up and went with IPCop. I kept getting the "Boot

All, I have a simple question and a complicated reason for asking: Is it possible to change asterisk's source port for outbound IAX2 connections? I've tried using "sourceaddress" to no avail. I can set it to: proper.ip.of.box:4569 or 0.0.0.0:4569 and it works as expected. But if I try to set it to: proper.ip.of.box:5000 or 0.0.0.0:5000 it fails around line 8536 in

I know a lot of you are using IPCop where you work. They have three (3) updates posted, during the past two (2) days. The last one, I'm getting an error, when I try to Download it, and I will report that to the IPCop list or bugzilla after I send this message. "No such file or directory http://prdownloads.sourceforge.net/ipcop/ipcop-1.4.21-update.i386.tgz.gpg?download" The problem I

Check your FW-1 tracker and see if any sip packets are dropped during call initiation. I had this problem and it went away when I upgraded the BT's firmware to the latest (16). Beware, though, that people on the list claim that this firmware breaks functionality of the message button and autoanswer. I haven't checked this yet, cause I can't afford to go back a version. I prefer a

Hello everybody, for just one week I try to install three servers on an OpenSuSE 10.3 dom0 equipped with 4 NICs. One server is an OX using the onboard NIC via xenbr0. This server runs!! For my IPCop server I intended to use the three remaining NICs (Intel Pro100/S, 3Com 3C590, Realtek RTL-8139). These three NICs should be used natively by my IPCop. So I tried to use the pciback driver. I wrote a

I have purchased a used Compaq DL360 which I was going to use as a proxy server. Presently, we are using a cheap box with ipcop which is working fine but it didn't have much RAM (64MB), etc. This new box we will want to run squid and perhaps dansguardian for filtering (this is a non-profit company) and I'm wondering if I should just put ipcop on it or would it be smarter/better to install

I run VMWare server 1.07 on Centos 5. Last night I left a Windows 2000 virtual machine doing a ClamWin scan of drive M: when I went to bed around midnight. Drive M: is actually a volume on the Centos 5 host, mounted via Samba. It has about 40Gb of photos on it, plus a few other things. I had the VM up visible in the VMWare Server Console running under KDE on display 8 (X session #1), my

Hello-- I am brand new to this list. I''ve been using a pre-packaged subset of Linux that comes with an application called IPCop. (If you''re unfamiliar with IPCop, I think it''s a wonderful, easy-to-use firewall application that will run on pretty low-end hardware.) But otherwise I''m pretty much a neophyte with Linux. Two questions: 1. Is there an archive for

On Mon, 2015-06-29 at 08:17 -0700, david wrote: > <snip> > > > >Yup. For, um, about a dozen years, I ran RH 7.1,7.2, 7.3, and eventually 9 > >on an old box that was nothing but a firewall router. I was seriously > >paranoid - no gcc or any development tools, no X, not much of anything. To > >the best of my knowledge, we never had a breakin. > > >