[Serusers] NAT

harry gaillac gaillacharry at yahoo.fr
Tue Apr 12 00:04:30 CEST 2005


Hello,

I read the howto frop onsip.org in order to set NAT
with rtpproxy.

I setup ser-0.9.0 rtpproxy from CVS it's ok .

192.168.0.0/24---FW+NAT---SER+rtpproxy------public    
                                            network

Here are my netfilter rules below :

My two Polycom ip 300 (alice & bob) are able to
register to ser but Subscribe/Notify via SIMPLE don't
work !?

When i try to call alice from bob or bob from alice
ser 
reply 404 not found !!!!!!!

I wasted much time with ethereal to find the solution.

Thanks for help 

Harry -:(


Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source 
             destination         
 1273  885K ACCEPT     all  --  *      *      
0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED 
    7   429 ACCEPT     all  --  lo     *      
0.0.0.0/0            0.0.0.0/0           state NEW 
   70  4610 ACCEPT     all  --  eth0   *      
192.168.0.0/24       0.0.0.0/0           state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:80
state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:443
state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:21
state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:2401
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp dpt:53
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp dpt:123
state NEW 
    0     0 ACCEPT     icmp --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           icmp type 0
code 0 state NEW 
    0     0 ACCEPT     icmp --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           icmp type 8
code 0 state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:5060
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp dpt:5060
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp
dpts:35000:65000 state NEW 
  678 32876 REJECT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           reject-with
tcp-reset 
   26  1994 REJECT     all  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           reject-with
icmp-net-prohibited 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source 
             destination         
    0     0 ACCEPT     all  --  *      *      
0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  eth0   *      
192.168.0.0/24       0.0.0.0/0           state NEW 
    0     0 ACCEPT     all  --  *      eth0   
192.168.0.0/24       0.0.0.0/0           state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:80
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:80
state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:443
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:443
state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:21
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:21
state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:2401
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:2401
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp dpt:53
state NEW 
    0     0 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp dpt:53
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp dpt:123
state NEW 
    0     0 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp dpt:123
state NEW 
    0     0 ACCEPT     icmp --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           icmp type 0
code 0 state NEW 
    0     0 ACCEPT     icmp --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           icmp type 8
code 0 state NEW 
    0     0 ACCEPT     icmp --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           icmp type 0
code 0 state NEW 
    0     0 ACCEPT     icmp --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           icmp type 8
code 0 state NEW 
    0     0 ACCEPT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           tcp dpt:5060
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp dpt:5060
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:5060
state NEW 
    0     0 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp dpt:5060
state NEW 
    0     0 ACCEPT     udp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           udp
dpts:35000:65000 state NEW 
    0     0 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp
dpts:35000:65000 state NEW 
    0     0 REJECT     tcp  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           reject-with
tcp-reset 
    0     0 REJECT     all  --  ppp0   *      
0.0.0.0/0            0.0.0.0/0           reject-with
icmp-net-prohibited 
    0     0 REJECT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           reject-with
tcp-reset 
    0     0 REJECT     all  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           reject-with
icmp-net-prohibited 

Chain OUTPUT (policy DROP 1 packets, 164 bytes)
 pkts bytes target     prot opt in     out     source 
             destination         
 2072  424K ACCEPT     all  --  *      *      
0.0.0.0/0            0.0.0.0/0           state
RELATED,ESTABLISHED 
    7   429 ACCEPT     all  --  *      lo     
0.0.0.0/0            0.0.0.0/0           state NEW 
   32  2432 ACCEPT     all  --  *      eth0   
192.168.0.0/24       0.0.0.0/0           state NEW 
   47  2820 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:80
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:443
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:21
state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:2401
state NEW 
   80  5888 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp dpt:53
state NEW 
    0     0 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp dpt:123
state NEW 
    0     0 ACCEPT     icmp --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           icmp type 0
code 0 state NEW 
    0     0 ACCEPT     icmp --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           icmp type 8
code 0 state NEW 
    0     0 ACCEPT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           tcp dpt:5060
state NEW 
    0     0 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp dpt:5060
state NEW 
    0     0 ACCEPT     udp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           udp
dpts:35000:65000 state NEW 
    0     0 REJECT     tcp  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           reject-with
tcp-reset 
    0     0 REJECT     all  --  *      ppp0   
0.0.0.0/0            0.0.0.0/0           reject-with
icmp-net-prohibited 




	

	
		
__________________________________________________________________
Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! 
Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ser.cfg
Type: application/octet-stream
Size: 5359 bytes
Desc: ser.cfg
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20050412/db39ca49/attachment.obj>


More information about the sr-users mailing list