Hi <br>Use <br><a href="http://www.sipwise.com">www.sipwise.com</a> <br>x-lite has its own stun server. <br><br><a href="http://siprouter.onsip.org/doc/gettingstated/">http://siprouter.onsip.org/doc/gettingstated/</a><br>
<br>U can get clear opinion on NAT with Rtp proxy or Media proxy . <br><br><div><span class="gmail_quote">On 3/31/07, <b class="gmail_sendername">Abdurrahman Sahin</b> <<a href="mailto:abdsahin@gmail.com">abdsahin@gmail.com
</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff">
<div><font face="Arial" size="2">hi;</font></div>
<div><font face="Arial" size="2">when i use a stun server i can register my UAs ,
but i didnt like this method, i think i should be able to do it without a
stun server at first, i see <a name="111a71f9ca8a30f8_AEN2">nathelper Module</a> in the
documentatios.</font></div>
<div><font face="Arial" size="2">is there somebody to show how to use nathelper
module?</font></div><div><span class="e" id="q_111a71f9ca8a30f8_1">
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2"></font> </div>
<blockquote style="border-left: 2px solid rgb(0, 0, 0); padding-right: 0px; padding-left: 5px; margin-left: 5px; margin-right: 0px;">
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;">----- Original Message ----- </div>
<div style="background: rgb(228, 228, 228) none repeat scroll 0% 50%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial; font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;">
<b>From:</b>
<a title="sunkara.raviprakash.feb14@gmail.com" href="mailto:sunkara.raviprakash.feb14@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">raviprakash sunkara</a>
</div>
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>To:</b> <a title="abdsahin@gmail.com" href="mailto:abdsahin@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
asahin</a> </div>
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>Sent:</b> Saturday, March 31, 2007 7:25
AM</div>
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>Subject:</b> Re: [Users] Re: openser behind
nat UAs behind NAT</div>
<div><br></div>Hi Asahin, <br><br>When U with OpenSER Behind NAT,
<br>I need to know that is OpenSER is Behind the NAT, which having the
Firewall router/NAT. <br><br>Is the OpenSER is private IP or Public IP
(ISP)<br><br>if the OpenSER is Having the Private IP, of that IP is
should forwards the SIP port and RTP ports, <br>and in openserclt, SIP Domain
is the public ip. <br><br><br>alias should be the Sip domain name <br>In
Register Section if!www_authorize("alias name or realm", " subscriber"
)<br><br><br>
<div><span class="gmail_quote">On 3/31/07, <b class="gmail_sendername">asahin</b>
<<a href="mailto:abdsahin@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">abdsahin@gmail.com</a>>
wrote:</span>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff">
<div><font face="Arial" size="2">hi all;</font></div>
<div><font face="Arial" size="2">i am now able to register my client with the
openserver server.</font></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2">i used STUN server option of x-lite and <a href="http://stun.voipuser.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">stun.voipuser.org</a> as the
stun server</font></div>
<div><font face="Arial" size="2">i also set/exported SIP_DOMAIN variable to
my public openser server ip address.</font></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2">i wonder do i have to use a stun server
?</font></div>
<div><span>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2"></font> </div>
<blockquote dir="ltr" style="border-left: 2px solid rgb(0, 0, 0); padding-right: 0px; padding-left: 5px; margin-left: 5px; margin-right: 0px;">
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;">-----
Original Message ----- </div>
<div style="background: rgb(228, 228, 228) none repeat scroll 0% 50%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial; font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;">
<b>From:</b>
<a title="abdsahin@gmail.com" href="mailto:abdsahin@gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">asahin</a> </div>
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>To:</b>
<a title="users@openser.org" href="mailto:users@openser.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">users@openser.org</a> </div>
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>Sent:</b>
Friday, March 30, 2007 10:26 PM</div>
<div style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>Subject:</b>
openser behind nat UAs behind NAT</div>
<div><br></div>
<div><font face="Arial" size="2">hi;</font></div>
<div><font face="Arial" size="2">i installed and tested openser on the
internal network, it was working.</font></div>
<div><font face="Arial" size="2">i tried to test it behind NAT with x-lite sip
client, but it failed.</font></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2">i defined a port mapping on the adsl modem
for udp/tcp 5060 ports to forward the packets to the openser installed
machine.</font></div>
<div><font face="Arial" size="2">when i try to register to openser i
received a 408 request timeout message.</font></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2">i guess its due to external ip of the openser
server. i think i should define external ip of the modem to the openser as
if it's its own ip, but dont where to define it.</font></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2">here is the ngrep dump at the
server.</font></div>
<div><font face="Arial" size="2">U external_ip_of_ua:23975 -> <a href="http://192.168.200.2:5060" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.200.2:5060</a> REGISTER
sip:external_ip_of_openser SIP/2.0..Via: SIP/2.0/UDP
external_ip_of_ua:23975;branch=z9hG4bK-d87543-307c62021a71bf6d-1--d87543-;rport..Max-Forwards:
70..Contact:
<sip:apo@external_ip_of_ua:23975;rinstance=6a2c0ccf1a30b6bf>..To:
"apo"<sip:apo@external_ip_of_openser>..From:
"apo"<sip:apo@external_ip_of_ua;tag=da6a3851..Call-ID:
ODJmOTVkNmIxNjE0NWM3MWNiNTQ4ZjFlMmVkZDZmYjQ...CSeq: 1 REGISTER..
Expires: 3600..Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY,
MESSAGE, SUBSCRIBE, INFO..User-Agent: X-Lite release 1006e stamp
34025..Content-Length: 0....#U <a href="http://192.168.200.2:5060" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.200.2:5060</a>
-> external_ip_of_openser:5060<br> REGISTER
sip:external_ip_of_openser SIP/2.0..Via: SIP/2.0/UDP <a href="http://192.168.200.2" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.200.2</a>;branch=z9hG4bKd734.53940821.0..Via:
SIP/2.0/UDP
external_ip_of_ua:23975;branch=z9hG4bK-d87543-307c62021a71bf6d-1--d87543-;rport=23975..Max-Forwards:
69..Contact:
<sip:apo@external_ip_of_ua:23975;rinstance=6a2c0ccf1a30b6bf>..To:
"apo"<sip:apo@external_ip_of_openser>..From:
"apo"<sip:apo@external_ip_of_ua;tag=da6a3851..Call- ID:
ODJmOTVkNmIxNjE0NWM3MWNiNTQ4ZjFlMmVkZDZmYjQ...CSeq: 1 REGISTER..Expires:
3600..Allow: INVITE, ACK, CANCEL, OPTIONS, B YE, REFER, NOTIFY,
MESSAGE, SUBSCRIBE, INFO..User-Agent: X-Lite release 1006e stamp
34025..Content-Length: 0..P-hint: out bound....</font></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2">my openser.cfg file is the initial openser
openser.cfg file i didnt change it.</font></div>
<div><font face="Arial" size="2">-------------</font></div>
<div><font size="2"></font>
<p><font size="2">#</font></p><font size="2"></font>
<p><font size="2"># $Id: openser.cfg 1676 2007-02-21 13:16:34Z bogdan_iancu
$</font></p><font size="2"></font>
<p><font size="2">#</font></p><font size="2"></font>
<p><font size="2"># simple quick-start config script</font></p><font size="2"></font>
<p><font size="2"># Please refer to the Core CookBook at <a href="http://www.openser.org/dokuwiki/doku.php" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.openser.org/dokuwiki/doku.php
</a></font></p><font size="2"></font>
<p><font size="2"># for a explanation of possible statements, functions and
parameters.</font></p><font size="2"></font>
<p><font size="2">#</font></p><font size="2"></font>
<p><font size="2"># ----------- global configuration parameters
------------------------</font></p><font size="2"></font>
<p><font size="2">debug=3 # debug level (cmd line:
-dddddddddd)</font></p><font size="2"></font>
<p><font size="2">fork=yes</font></p><font size="2"></font>
<p><font size="2">log_stderror=no # (cmd line: -E)</font></p><font size="2"></font>
<p><font size="2">children=4</font></p><font size="2"></font>
<p><font size="2"># Uncomment these lines to enter debugging mode
</font></p><font size="2"></font>
<p><font size="2">#fork=no</font></p><font size="2"></font>
<p><font size="2">#log_stderror=yes</font></p><font size="2"></font>
<p><font size="2">#</font></p><font size="2"></font>
<p><font size="2">port=5060</font></p><font size="2"></font>
<p><font size="2"># uncomment the following lines for TLS
support</font></p><font size="2"></font>
<p><font size="2">#disable_tls = 0</font></p><font size="2"></font>
<p><font size="2">#listen = tls:your_IP:5061</font></p><font size="2"></font>
<p><font size="2">#tls_verify_server = 1</font></p><font size="2"></font>
<p><font size="2">#tls_verify_client = 1</font></p><font size="2"></font>
<p><font size="2">#tls_require_client_certificate = 0</font></p><font size="2"></font>
<p><font size="2">#tls_method = TLSv1</font></p><font size="2"></font>
<p><font size="2">#tls_certificate =
"/usr/local/etc/openser/tls/user/user-cert.pem"</font></p><font size="2"></font>
<p><font size="2">#tls_private_key =
"/usr/local/etc/openser/tls/user/user-privkey.pem"</font></p><font size="2"></font>
<p><font size="2">#tls_ca_list =
"/usr/local/etc/openser/tls/user/user-calist.pem"</font></p><font size="2"></font>
<p><font size="2"># ------------------ module loading
----------------------------------</font></p><font size="2"></font>
<p><font size="2">#set module path</font></p><font size="2"></font>
<p><font size="2">mpath="/usr/local/lib64/openser/modules/"</font></p><font size="2"></font>
<p><font size="2"># Uncomment this if you want to use SQL
database</font></p><font size="2"></font>
<p><font size="2">#loadmodule "mysql.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "sl.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "tm.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "rr.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "maxfwd.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "usrloc.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "registrar.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "textops.so"</font></p><font size="2"></font>
<p><font size="2">loadmodule "mi_fifo.so"</font></p><font size="2"></font>
<p><font size="2"># Uncomment this if you want digest
authentication</font></p><font size="2"></font>
<p><font size="2"># mysql.so must be loaded !</font></p><font size="2"></font>
<p><font size="2">#loadmodule "auth.so"</font></p><font size="2"></font>
<p><font size="2">#loadmodule "auth_db.so"</font></p><font size="2"></font>
<p><font size="2"># ----------------- setting module-specific parameters
---------------</font></p><font size="2"></font>
<p><font size="2"># -- mi_fifo params --</font></p><font size="2"></font>
<p><font size="2">modparam("mi_fifo", "fifo_name",
"/tmp/openser_fifo")</font></p><font size="2"></font>
<p><font size="2"># -- usrloc params --</font></p><font size="2"></font>
<p><font size="2">modparam("usrloc", "db_mode", 0)</font></p><font size="2"></font>
<p><font size="2"># Uncomment this if you want to use SQL database
</font></p><font size="2"></font>
<p><font size="2"># for persistent storage and comment the previous
line</font></p><font size="2"></font>
<p><font size="2">#modparam("usrloc", "db_mode", 2)</font></p><font size="2"></font>
<p><font size="2"># -- auth params --</font></p><font size="2"></font>
<p><font size="2"># Uncomment if you are using auth module</font></p><font size="2"></font>
<p><font size="2">#</font></p><font size="2"></font>
<p><font size="2">#modparam("auth_db", "calculate_ha1", yes)</font></p><font size="2"></font>
<p><font size="2">#</font></p><font size="2"></font>
<p><font size="2"># If you set "calculate_ha1" parameter to yes (which true
in this config), </font></p><font size="2"></font>
<p><font size="2"># uncomment also the following parameter)</font></p><font size="2"></font>
<p><font size="2">#</font></p><font size="2"></font>
<p><font size="2">#modparam("auth_db", "password_column",
"password")</font></p><font size="2"></font>
<p><font size="2"># -- rr params --</font></p><font size="2"></font>
<p><font size="2"># add value to ;lr param to make some broken UAs
happy</font></p><font size="2"></font>
<p><font size="2">modparam("rr", "enable_full_lr", 1)</font></p><font size="2"></font>
<p><font size="2"># ------------------------- request routing logic
-------------------</font></p><font size="2"></font>
<p><font size="2"># main routing logic</font></p><font size="2"></font>
<p><font size="2">route{</font></p><font size="2"></font>
<p><font size="2"># initial sanity checks -- messages with</font></p><font size="2"></font>
<p><font size="2"># max_forwards==0, or excessively long
requests</font></p><font size="2"></font>
<p><font size="2">if (!mf_process_maxfwd_header("10")) {</font></p><font size="2"></font>
<p><font size="2">sl_send_reply("483","Too Many Hops");</font></p><font size="2"></font>
<p><font size="2">exit;</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2">if (msg:len >= 2048 ) {</font></p><font size="2"></font>
<p><font size="2">sl_send_reply("513", "Message too big");</font></p><font size="2"></font>
<p><font size="2">exit;</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2"># we record-route all messages -- to make sure
that</font></p><font size="2"></font>
<p><font size="2"># subsequent messages will go through our proxy;
that's</font></p><font size="2"></font>
<p><font size="2"># particularly good if upstream and downstream
entities</font></p><font size="2"></font>
<p><font size="2"># use different transport protocol</font></p><font size="2"></font>
<p><font size="2">if (!method=="REGISTER")</font></p><font size="2"></font>
<p><font size="2">record_route();</font></p><font size="2"></font>
<p><font size="2"># subsequent messages withing a dialog should take
the</font></p><font size="2"></font>
<p><font size="2"># path determined by record-routing</font></p><font size="2"></font>
<p><font size="2">if (loose_route()) {</font></p><font size="2"></font>
<p><font size="2"># mark routing logic in request</font></p><font size="2"></font>
<p><font size="2">append_hf("P-hint: rr-enforced\r\n"); </font></p><font size="2"></font>
<p><font size="2">route(1);</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2">if (!uri==myself) {</font></p><font size="2"></font>
<p><font size="2"># mark routing logic in request</font></p><font size="2"></font>
<p><font size="2">append_hf("P-hint: outbound\r\n"); </font></p><font size="2"></font>
<p><font size="2"># if you have some interdomain connections via
TLS</font></p><font size="2"></font>
<p><font size="2">#if(uri=~"@tls_domain1.net") {</font></p><font size="2"></font>
<p><font size="2"># t_relay("tls:<a href="http://domain1.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">domain1.net</a>");</font></p><font size="2"></font>
<p><font size="2"># exit;</font></p><font size="2"></font>
<p><font size="2">#} else if(uri=~"@tls_domain2.net") {</font></p><font size="2"></font>
<p><font size="2"># t_relay("tls:<a href="http://domain2.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">domain2.net</a>");</font></p><font size="2"></font>
<p><font size="2"># exit;</font></p><font size="2"></font>
<p><font size="2">#}</font></p><font size="2"></font>
<p><font size="2">route(1);</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2"># if the request is for other domain use
UsrLoc</font></p><font size="2"></font>
<p><font size="2"># (in case, it does not work, use the following
command</font></p><font size="2"></font>
<p><font size="2"># with proper names and addresses in it)</font></p><font size="2"></font>
<p><font size="2">if (uri==myself) {</font></p><font size="2"></font>
<p><font size="2">if (method=="REGISTER") {</font></p><font size="2"></font>
<p><font size="2"># Uncomment this if you want to use digest
authentication</font></p><font size="2"></font>
<p><font size="2">#if (!www_authorize("<a href="http://openser.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">openser.org</a>", "subscriber"))
{</font> </p><font size="2"></font>
<p><font size="2"># www_challenge("<a href="http://openser.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">openser.org</a>",
"0");</font></p><font size="2"></font>
<p><font size="2"># exit;</font></p><font size="2"></font>
<p><font size="2">#};</font></p><font size="2"></font>
<p><font size="2">save("location");</font></p><font size="2"></font>
<p><font size="2">exit;</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2">lookup("aliases");</font></p><font size="2"></font>
<p><font size="2">if (!uri==myself) {</font></p><font size="2"></font>
<p><font size="2">append_hf("P-hint: outbound alias\r\n"); </font></p><font size="2"></font>
<p><font size="2">route(1);</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2"># native SIP destinations are handled using our USRLOC
DB</font></p><font size="2"></font>
<p><font size="2">if (!lookup("location")) {</font></p><font size="2"></font>
<p><font size="2">sl_send_reply("404", "Not Found");</font></p><font size="2"></font>
<p><font size="2">exit;</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2">append_hf("P-hint: usrloc applied\r\n"); </font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2">route(1);</font></p><font size="2"></font>
<p><font size="2">}</font></p><font size="2"></font>
<p><font size="2"></font> </p><font size="2"></font>
<p><font size="2">route[1] {</font></p><font size="2"></font>
<p><font size="2"># send it out now; use stateful forwarding as it works
reliably</font></p><font size="2"></font>
<p><font size="2"># even for UDP2TCP</font></p><font size="2"></font>
<p><font size="2">if (!t_relay()) {</font></p><font size="2"></font>
<p><font size="2">sl_reply_error();</font></p><font size="2"></font>
<p><font size="2">};</font></p><font size="2"></font>
<p><font size="2">exit;</font></p><font size="2"></font>
<p><font size="2">}</font></p><font size="2"></font>
<p><font size="2"><font face="Arial"></font></font> </p></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2"></font> </div></blockquote></span></div></div><br>_______________________________________________<br>Users
mailing list<br><a href="mailto:Users@openser.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">Users@openser.org</a><br><a href="http://openser.org/cgi-bin/mailman/listinfo/users" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://openser.org/cgi-bin/mailman/listinfo/users</a><br><br></blockquote></div><br><br clear="all"><br>-- <br>Thanks and Regards<br>Ravi Prakash Sunkara <br><a href="mailto:ravi.sunkara@hyperion-tech.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
ravi.sunkara@hyperion-tech.com
</a><br>M:+91 9985077535<br><a href="http://www.hyperion-tech.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">www.hyperion-tech.com</a><br>Client and
Parent company :- <a href="http://www.august-networks.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">www.august-networks.com</a>
</blockquote></span></div></div>
</blockquote></div><br><br clear="all"><br>-- <br>Thanks and Regards<br>Ravi Prakash Sunkara                <br><a href="mailto:ravi.sunkara@hyperion-tech.com">ravi.sunkara@hyperion-tech.com</a>         <br>M:+91 9985077535<br><a href="http://www.hyperion-tech.com">
www.hyperion-tech.com</a><br>Client and Parent company :- <a href="http://www.august-networks.com">www.august-networks.com</a>