Hello all,
I have a kamailio server on a public IP address with a private interconnect into my office network. The private interconnect allows the server to see requests from individual 10.x.x.x IP addresses instead of everything coming through the public NAT. This avoids timeout issues and reduces keepalive traffic.
The problem is the SIP headers from clients on the 10.x.x.x IP range match nat_uac_test because of the RFC1918 address in the via and contact headers and so NAT support is enabled regardless of no NAT being present.
Is it possible to disable NAT support for a given IP range, in my case 10.x.x.x ?
Thanks,
John
John,
You can switch rfc1918 checking by changing the nat_uac_test flags. See:
http://www.kamailio.org/docs/modules/4.0.x/modules/nathelper.html#idp1537653 6
Looks like 18 might fit for you.
Regards
John
-----Original Message----- From: sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of David Dean Sent: 13 November 2013 22:29 To: sr-users@lists.sip-router.org Subject: [SR-Users] Disable NAT for given IP range
Hello all,
I have a kamailio server on a public IP address with a private interconnect into my office network. The private interconnect allows the server to see requests from individual 10.x.x.x IP addresses instead of everything coming through the public NAT. This avoids timeout issues and reduces keepalive traffic.
The problem is the SIP headers from clients on the 10.x.x.x IP range match nat_uac_test because of the RFC1918 address in the via and contact headers and so NAT support is enabled regardless of no NAT being present.
Is it possible to disable NAT support for a given IP range, in my case 10.x.x.x ?
Thanks,
John
_______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
Hi, also you can try to use the IPOPS module, for example:
if (is_in_subnet("10.0.123.123", "10.0.123.1/24")) { xlog("L_INFO", "it's in the subnet\n"); xlog("L_INFO", "Skip NAT test\n"); ... ...
}
http://kamailio.org/docs/modules/4.0.x/modules/ipops.html#idp42416
Daniel
On 11/13/2013 11:42 PM, John Murray wrote:
John,
You can switch rfc1918 checking by changing the nat_uac_test flags. See:
http://www.kamailio.org/docs/modules/4.0.x/modules/nathelper.html#idp1537653 6
Looks like 18 might fit for you.
Regards
John
-----Original Message----- From: sr-users-bounces@lists.sip-router.org [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of David Dean Sent: 13 November 2013 22:29 To: sr-users@lists.sip-router.org Subject: [SR-Users] Disable NAT for given IP range
Hello all,
I have a kamailio server on a public IP address with a private interconnect into my office network. The private interconnect allows the server to see requests from individual 10.x.x.x IP addresses instead of everything coming through the public NAT. This avoids timeout issues and reduces keepalive traffic.
The problem is the SIP headers from clients on the 10.x.x.x IP range match nat_uac_test because of the RFC1918 address in the via and contact headers and so NAT support is enabled regardless of no NAT being present.
Is it possible to disable NAT support for a given IP range, in my case 10.x.x.x ?
Thanks,
John
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users