[Serusers] ser to asterisk
Jan Janak
jan at iptel.org
Tue May 11 15:42:21 CEST 2004
On 11-05 08:48, Tjapko Smits wrote:
> Thanks Alan,
>
> Ser to asterisk works now. It was quit easy indeed.
>
> According to your subtle remark NAT penetration is not so easy?
>
> I saw this in the cookbook that made me think:
>
> # prevents private ip space from being used
> if (search("^(Contact|m): .*@(192\.168\.|10\.|172\.16)")) {
> if (method=="REGISTER") {
> log(1, "LOG: Someone trying to register from private IP\n");
> sl_send_reply("479", "Please don't use private IP addresses" );
> break;
> };
> }
>
> If you can filter a nated endpoint like this than i should be able to
> also activate a proxy mechanism that penetrates the nated environment
> like nathelper or something. Is that a correct suggestion assuming that
> we are not discussing firewalls or other port blocking mechanisms.
Yes, but it might be better to use nat_uac_test which checks if the IP
the request is coming from is different from the IP in Via header
field.
Jan.
More information about the sr-users
mailing list