[Serusers] ser to asterisk

Tjapko Smits itsc99 at cantv.net
Tue May 11 10:41:26 CEST 2004


Thanks Jan, 

Forgive me my question. Since I am new in this scene I would like to
know where i can find information on nat_uac_test with examples :-) like
you mentioned so I can implement this. 

Is nathelper the correct mechanism to implement here or are there other
routines? 

Tjapko. 


On Tue, 2004-05-11 at 15:42, Jan Janak wrote:
> On 11-05 08:48, Tjapko Smits wrote:
> > Thanks Alan,
> > 
> > Ser to asterisk works now. It was quit easy indeed. 
> > 
> > According to your subtle remark NAT penetration is not so easy? 
> > 
> > I saw this in the cookbook that made me think: 
> > 
> > # prevents private ip space from being used
> >   if (search("^(Contact|m): .*@(192\.168\.|10\.|172\.16)")) {
> >     if (method=="REGISTER") {
> >       log(1, "LOG: Someone trying to register from private IP\n");
> >       sl_send_reply("479", "Please don't use private IP addresses" );
> >       break;
> >     };
> >   }
> > 
> > If you can filter a nated endpoint like this than i should be able to
> > also activate a proxy mechanism that penetrates the nated environment
> > like nathelper or something. Is that a correct suggestion assuming that
> > we are not discussing firewalls or other port blocking mechanisms.
> 
>   Yes, but it might be better to use nat_uac_test which checks if the IP
>   the request is coming from is different from the IP in Via header
>   field.
> 
>     Jan.




More information about the sr-users mailing list