[Serusers] SER+NAT+RTP PROXY
Maxim Sobolev
sobomax at portaone.com
Sun Jul 18 16:40:47 CEST 2004
Please check modules/nathelper/examples/alg.cfg for example on how to
correctly configure nathelper+rtpproxy to work as an application-level
gateway.
-Maxim
Karunakar Chemudugunta wrote:
> Nope, I have down loaded latest rtpproxy and compiled on linux and
> running rtpproxy without any parameters on same machine of SER.
>
> How to enable debug on rtpproxy ?
>
> Do I need to pass any parameters for rtpproxy ???
>
> Do I need to set any info regarding rtp proxy in ser.cfg file ?
>
> Please find my attached ser.cfg which is usedfor this test.
>
>
> Regards,
> KRC
>
>
>
>
>
> On Fri, 9 Jul 2004 08:48:15 +0200, Andrei Pelinescu-Onciul
> <pelinescu-onciul at fokus.fraunhofer.de> wrote:
>
>>On Jul 08, 2004 at 17:17, Karunakar Chemudugunta <voicexml at gmail.com> wrote:
>>[...]
>>
>>>SER is succussfully etablishing connection between two use agents and
>>>but it is failed to forward rtp between two UAs. No voice.
>>>
>>>I assume, may be because of below errors.
>>>
>>>Again thanks for help.
>>>
>>>Regards,
>>>KRC
>>>
>>>ERRORS
>>>-----------------------------------------------------------------------------------------------
>>>Jul 8 16:45:06 engcasip002 ser[18074]: ERROR: send_rtpp_command:
>>>can't read reply from a RTP proxy
>>>Jul 8 16:45:06 engcasip002 ser[18074]: WARNING: rtpp_test: can't get
>>>version of the RTP proxy
>>
>>
>>It looks like you don't have rtpproxy running. Start it :-)
>>
>>
>>Andrei
>>
>>
>>
>>------------------------------------------------------------------------
>>
>>#
>># $Id: nathelper.cfg,v 1.1 2003/11/10 14:15:36 janakj Exp $
>>#
>># simple quick-start config script including nathelper support
>>
>># This default script includes nathelper support. To make it work
>># you will also have to install Maxim's RTP proxy. The proxy is enforced
>># if one of the parties is behind a NAT.
>>#
>># If you have an endpoing in the public internet which is known to
>># support symmetric RTP (Cisco PSTN gateway or voicemail, for example),
>># then you don't have to force RTP proxy. If you don't want to enforce
>># RTP proxy for some destinations than simply use t_relay() instead of
>># route(1)
>>#
>># Sections marked with !! Nathelper contain modifications for nathelper
>>#
>># NOTE !! This config is EXPERIMENTAL !
>>#
>># ----------- global configuration parameters ------------------------
>>
>>debug=3 # debug level (cmd line: -dddddddddd)
>>fork=yes
>>log_stderror=no # (cmd line: -E)
>>
>>/* Uncomment these lines to enter debugging mode
>>fork=no
>>log_stderror=yes
>>*/
>>
>>check_via=no # (cmd. line: -v)
>>dns=no # (cmd. line: -r)
>>rev_dns=no # (cmd. line: -R)
>>port=5060
>>children=4
>>fifo="/tmp/ser_fifo"
>>
>># ------------------ module loading ----------------------------------
>>
>># Uncomment this if you want to use SQL database
>>#loadmodule "/usr/local/lib/ser/modules/mysql.so"
>>
>>loadmodule "/usr/local/lib/ser/modules/sl.so"
>>loadmodule "/usr/local/lib/ser/modules/tm.so"
>>loadmodule "/usr/local/lib/ser/modules/rr.so"
>>loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
>>loadmodule "/usr/local/lib/ser/modules/usrloc.so"
>>loadmodule "/usr/local/lib/ser/modules/registrar.so"
>>loadmodule "/usr/local/lib/ser/modules/textops.so"
>>
>># Uncomment this if you want digest authentication
>># mysql.so must be loaded !
>>#loadmodule "/usr/local/lib/ser/modules/auth.so"
>>#loadmodule "/usr/local/lib/ser/modules/auth_db.so"
>>
>># !! Nathelper
>>loadmodule "/usr/local/lib/ser/modules/nathelper.so"
>>
>># ----------------- setting module-specific parameters ---------------
>>
>># -- usrloc params --
>>
>>modparam("usrloc", "db_mode", 0)
>>
>># Uncomment this if you want to use SQL database
>># for persistent storage and comment the previous line
>>#modparam("usrloc", "db_mode", 2)
>>
>># -- auth params --
>># Uncomment if you are using auth module
>>#
>>#modparam("auth_db", "calculate_ha1", yes)
>>#
>># If you set "calculate_ha1" parameter to yes (which true in this config),
>># uncomment also the following parameter)
>>#
>>#modparam("auth_db", "password_column", "password")
>>
>># -- rr params --
>># add value to ;lr param to make some broken UAs happy
>>modparam("rr", "enable_full_lr", 1)
>>
>># !! Nathelper
>>modparam("registrar", "nat_flag", 6)
>>modparam("nathelper", "natping_interval", 30) # Ping interval 30 s
>>modparam("nathelper", "ping_nated_only", 1) # Ping only clients behind NAT
>>
>># ------------------------- request routing logic -------------------
>>
>># main routing logic
>>
>>route{
>>
>> # initial sanity checks -- messages with
>> # max_forwards==0, or excessively long requests
>> if (!mf_process_maxfwd_header("10")) {
>> sl_send_reply("483","Too Many Hops");
>> break;
>> };
>> if (msg:len >= max_len ) {
>> sl_send_reply("513", "Message too big");
>> break;
>> };
>>
>> # !! Nathelper
>> # Special handling for NATed clients; first, NAT test is
>> # executed: it looks for via!=received and RFC1918 addresses
>> # in Contact (may fail if line-folding is used); also,
>> # the received test should, if completed, should check all
>> # vias for rpesence of received
>> if (nat_uac_test("3")) {
>> # Allow RR-ed requests, as these may indicate that
>> # a NAT-enabled proxy takes care of it; unless it is
>> # a REGISTER
>>
>> if (method == "REGISTER" || ! search("^Record-Route:")) {
>> log("LOG: Someone trying to register from private IP, rewriting\n");
>>
>> # This will work only for user agents that support symmetric
>> # communication. We tested quite many of them and majority is
>> # smart enough to be symmetric. In some phones it takes a configuration
>> # option. With Cisco 7960, it is called NAT_Enable=Yes, with kphone it is
>> # called "symmetric media" and "symmetric signalling".
>>
>> fix_nated_contact(); # Rewrite contact with source IP of signalling
>> if (method == "INVITE") {
>> fix_nated_sdp("1"); # Add direction=active to SDP
>> };
>> force_rport(); # Add rport parameter to topmost Via
>> setflag(6); # Mark as NATed
>> };
>> };
>>
>> # we record-route all messages -- to make sure that
>> # subsequent messages will go through our proxy; that's
>> # particularly good if upstream and downstream entities
>> # use different transport protocol
>> if (!method=="REGISTER") record_route();
>>
>> # subsequent messages withing a dialog should take the
>> # path determined by record-routing
>> if (loose_route()) {
>> # mark routing logic in request
>> append_hf("P-hint: rr-enforced\r\n");
>> route(1);
>> break;
>> };
>>
>> if (!uri==myself) {
>> # mark routing logic in request
>> append_hf("P-hint: outbound\r\n");
>> route(1);
>> break;
>> };
>>
>> # if the request is for other domain use UsrLoc
>> # (in case, it does not work, use the following command
>> # with proper names and addresses in it)
>> if (uri==myself) {
>>
>> if (method=="REGISTER") {
>>
>># Uncomment this if you want to use digest authentication
>># if (!www_authorize("iptel.org", "subscriber")) {
>># www_challenge("iptel.org", "0");
>># break;
>># };
>>
>> save("location");
>> break;
>> };
>>
>> lookup("aliases");
>> if (!uri==myself) {
>> append_hf("P-hint: outbound alias\r\n");
>> route(1);
>> break;
>> };
>>
>> # native SIP destinations are handled using our USRLOC DB
>> if (!lookup("location")) {
>> sl_send_reply("404", "Not Found");
>> break;
>> };
>> };
>> append_hf("P-hint: usrloc applied\r\n");
>> route(1);
>>}
>>
>>route[1]
>>{
>>
>>
>> # if client or server know to be behind a NAT, enable relay
>> if (isflagset(6)) {
>> force_rtp_proxy();
>> };
>>
>> # NAT processing of replies; apply to all transactions (for example,
>> # re-INVITEs from public to private UA are hard to identify as
>> # NATed at the moment of request processing); look at replies
>> t_on_reply("1");
>>
>> # send it out now; use stateful forwarding as it works reliably
>> # even for UDP2TCP
>> if (!t_relay()) {
>> sl_reply_error();
>> };
>>}
>>
>># !! Nathelper
>>onreply_route[1] {
>> # NATed transaction ?
>> if (isflagset(6) && status =~ "(183)|2[0-9][0-9]") {
>> fix_nated_contact();
>> force_rtp_proxy();
>> # otherwise, is it a transaction behind a NAT and we did not
>> # know at time of request processing ? (RFC1918 contacts)
>> } else if (nat_uac_test("1")) {
>> fix_nated_contact();
>> };
>>}
>>
>>
>>
>>------------------------------------------------------------------------
>>
>>_______________________________________________
>>Serusers mailing list
>>serusers at lists.iptel.org
>>http://lists.iptel.org/mailman/listinfo/serusers
More information about the sr-users
mailing list