[Serusers] Proxy sending ACK on port 5060 instead of on contact port

mahesh mahesha at intoto.com
Wed Sep 15 12:28:29 CEST 2004


Zeus,
If you observe the fw2 capture, you see that ACK sent from the proxy is 
sent to port 5060 on host2, instead of to the contact port.(packet No:9).

The fw has a test version of our own implementation of the ALG. By the way 
what do you mean by different CONTACT header??

Mahesh


>Mahesh,
>
>I don't see anything wrong with IPTEL's proxy server. It's behaving well.
>The ACK is sending to HOST2 via the their proxy. What exactly is your
>problem?
>
>BTW, what kind of SIP-ALG are you using. It's kind of strange that it has a
>different CONTACT header yet it works.
>
>Zeus
>
> > -----Original Message-----
> > From: mahesh [mailto:mahesha at intoto.com]
> > Sent: Wednesday, 15 September 2004 7:12 PM
> > To: Zeus Ng
> > Cc: serusers at lists.iptel.org
> > Subject: RE: [Serusers] Proxy sending ACK on port 5060
> > instead of on contact port
> >
> >
> > Hi Zeus,
> >
> > I am attaching the ethereal captures of both fw1 and fw2(on
> > wan interfaces). The NAT IP used by fw1 is 202.125.84.164 and
> > the one used by fw2 is
> > 202.125.84.163
> >
> > regards
> > Mahesh
> >
> >
> > >Mahesh,
> > >
> > >Given that you have ethereal capture, send it in to the list
> > and we can
> > >see what's happening.
> > >
> > >Zeus
> > >
> > > > -----Original Message-----
> > > > From: serusers-bounces at lists.iptel.org
> > [mailto:serusers-bounces at lists.iptel.org]
> > > > On Behalf Of mahesh
> > > > Sent: Wednesday, 15 September 2004 5:15 PM
> > > > To: serusers at lists.iptel.org
> > > > Subject: [Serusers] Proxy sending ACK on port 5060 instead of on
> > > > contact port
> > > >
> > > >
> > > > Hi all,
> > > >
> > > > I am using the following configuration to test SJPhone
> > through IPTEL
> > > > proxy server(publicly
> > > > available:195.37.77.99).
> > > >
> > > > HOST1(win2K)---FW1---Internet---FW2---HOST2(winXP)
> > > >
> > > > Host1 and Host2 are hosts with private IPs having SJPhone
> > > > application. FW1 and FW2 are
> > > > firewall/NAT devices with SIP-ALG implementation. This means
> > > > all the SIP
> > > > messages are modified to include the public IPs in them. Also the
> > > > via,contact ports are modified. Now both host1 and host2
> > > > register with the iptel proxy server. A call is initiated
> > > > from host1. Host2
> > > > sends 200 OK response
> > > > to the HOST1. After this the ACK sent by Host1 is sent to
> > > > port 5060 on
> > > > HOst2,instead of the
> > > > contact port advertised in 200 OK. This is observed from
> > > > ethereal captures
> > > > on Host2. All these
> > > > messages are going through the proxy server(195.37.77.99).
> > > >
> > > > Can someone please tell me why the proxy server is behaving this
> > > > way, i.e. sending ACK on 5060
> > > > instead of the contact. Is there anything that i am missing
> > > > here or doing
> > > > wrong.
> > > >
> > > > Thanks
> > > > Mahesh
> > > >
> > > > _______________________________________________
> > > > Serusers mailing list
> > > > serusers at lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
> > > >
> >




More information about the sr-users mailing list