<div dir="ltr">This might help you as a starting point.<div><br></div><div><a href="https://github.com/davidcsi/kamailio-private-public">https://github.com/davidcsi/kamailio-private-public</a><br></div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Regards,</div><div><br></div>David Villasmil<div>email: <a href="mailto:david.villasmil.work@gmail.com" target="_blank">david.villasmil.work@gmail.com</a></div><div>phone: +34669448337</div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 17, 2020 at 1:20 PM Mihai Cezar <<a href="mailto:cezar@mokalife.ro">cezar@mokalife.ro</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>I do have kamailio an public IP and another nic with private IP that connects to the Asterisk LAN.</div><div><br></div><div>@Sergey I tried that scenario with double NAT, and, it work it.</div><div><br></div><div>If i choose to go rtpproxy which modules should i load (nat_helper, nat_traversal, rtpproxy) ?<br></div><div><br> </div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 17, 2020 at 2:38 PM Sergio Charrua <<a href="mailto:sergio.charrua@voip.pt" target="_blank">sergio.charrua@voip.pt</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Another example of when to use RTPProxy / RTPEngine is:<div><br></div><div>SIP user -> router -> INTERNET -> router / firewall -> Kamailio (private IP) -> Asterisk (private IP)</div><div><br></div><div>Apart from the routers, all other equipments are private IPs, hence being NATed and requiring RTP Proxy / RTP Engine to forward RTP streams to the correct ports.</div><div>As David Vilasmil points out, security wise, this is the best approach.... but it is a PITA configuring and making all the services work correctly.</div><div><br clear="all"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="color:rgb(0,0,0);margin:0px;font-family:Calibri,sans-serif;background-color:rgb(253,253,253)"><b><span style="font-family:Arial,sans-serif">Sérgio Charrua</span></b><br></p><div><div dir="ltr"><p style="font-size:11pt;color:rgb(0,0,0);margin:0px;font-family:Calibri,sans-serif;background-color:rgb(253,253,253)"><img src="http://cdn.shopify.com/s/files/1/0380/5305/t/11/assets/logo.png?11469850511917603945" width="96" height="32"><b><span style="font-size:9pt;font-family:Arial,sans-serif"><br></span></b></p><p style="font-size:11pt;color:rgb(0,0,0);margin:0px;font-family:Calibri,sans-serif;background-color:rgb(253,253,253)"><b><span style="font-size:9pt;font-family:Arial,sans-serif;color:red"><span style="color:rgb(0,0,0)"></span><span style="color:rgb(51,102,255)"><a href="http://www.voip.pt/" style="color:rgb(17,85,204)" target="_blank">www.voip.pt</a></span></span></b><span style="font-size:x-small"><span style="font-family:Arial,sans-serif;color:rgb(136,136,136)"><br></span><span style="font-family:Arial,sans-serif">Tel.: <span style="color:rgb(51,102,153)"><a href="callto:+351+91+104+12+66" style="color:rgb(51,102,153);text-decoration:none" target="_blank">+351 </a>21 130 71 77<br></span></span><span style="font-family:"Times New Roman",serif"></span></span></p><p style="font-size:11pt;color:rgb(0,0,0);margin:0px;font-family:Calibri,sans-serif;background-color:rgb(253,253,253)"><span style="font-size:x-small"><span style="font-family:Arial,sans-serif;color:rgb(187,187,187)"><span style="color:rgb(128,128,128)">Email : <strong><a href="mailto:sergio.charrua@voip.pt" style="color:rgb(17,85,204)" target="_blank">sergio.charrua@voip.pt</a></strong></span><br></span></span></p><table style="width:487.5pt" width="650" cellspacing="0" cellpadding="0" border="0">
<tbody><tr>
<td style="padding:0cm">
<p class="MsoNormal"><span style="font-family:"Vodafone Rg";color:rgb(204,204,204)" lang="EN-US">This message
and any files or documents attached are strictly confidential or otherwise
legally protected. </span></p><p class="MsoNormal"><span style="font-family:"Vodafone Rg";color:rgb(204,204,204)" lang="EN-US">It is intended only for the individual or entity named. If
you are not the named addressee or have received this email in error, please
inform the sender immediately, delete it from your system and do not copy or
disclose it or its contents or use it for any purpose. Please also note that
transmission cannot be guaranteed to be secure or error-free. </span><span style="font-family:"Times New Roman",serif" lang="EN-US"><span></span></span></p>
</td>
</tr>
</tbody></table><p style="color:rgb(0,0,0);margin:0px;font-family:Calibri,sans-serif;background-color:rgb(253,253,253)">
<span style="font-family:"Times New Roman",serif"></span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p style="color:rgb(0,0,0);margin:0px;font-family:Calibri,sans-serif;background-color:rgb(253,253,253)"> </p></div></div><div style="font-size:small"><br><br></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 17, 2020 at 12:15 PM Sergey Safarov <<a href="mailto:s.safarov@gmail.com" target="_blank">s.safarov@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">yes, if your asterisk has statically assigned (NAT-ed) public IP, then you do not need RTPproxy.<div>RTP proxy required when both sides of the call do not have statically assigned (NAT-ed) public IP.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 17, 2020 at 2:33 PM David Villasmil <<a href="mailto:david.villasmil.work@gmail.com" target="_blank">david.villasmil.work@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">It’s totally fine. Rtpengine is mainly used to also proxy rtp ie: public to private, etc. But if your asterisk is public, rtps will reach it, and you’re fine with it, go ahead</div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 17 Dec 2020 at 11:10, Mihai Cezar <<a href="mailto:cezar@mokalife.ro" target="_blank">cezar@mokalife.ro</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi,</div><div><br></div><div>Can't figure it out when to use RTPproxy, i am forwarding everything to asterisk in seem to work without RTPproxy.</div><div><br></div><div>The scenario is like this:</div><div>Softphone -> INTERNET -> Kamailio - > Asterisk (private ip)</div><div><br></div><div>Now it seems to work without any rtpproxy but is it ok?<br></div><br></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div></div>-- <br><div dir="ltr"><div dir="ltr"><div>Regards,</div><div><br></div>David Villasmil<div>email: <a href="mailto:david.villasmil.work@gmail.com" target="_blank">david.villasmil.work@gmail.com</a></div><div>phone: +34669448337</div></div></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div>