[Serusers] NAT
Greger V. Teigre
greger at teigre.com
Tue Apr 12 11:44:07 CEST 2005
Your attached ser.cfg does not use nathalper/rtpproxy.
Using the right rtpproxy config file could help:
http://www.onsip.org/modules/mydownloads/visit.php?cid=13&lid=19
Please note (as posted a couple of times already): That file has a small
error that is in the works to be fixed.
Between line 194 and 195, you need to insert: fix_nated_contact();
g-)
harry gaillac wrote:
>> Hello,
>>
>> I read the howto frop onsip.org in order to set NAT
>> with rtpproxy.
>>
>> I setup ser-0.9.0 rtpproxy from CVS it's ok .
>>
>> 192.168.0.0/24---FW+NAT---SER+rtpproxy------public
>> network
>>
>> Here are my netfilter rules below :
>>
>> My two Polycom ip 300 (alice & bob) are able to
>> register to ser but Subscribe/Notify via SIMPLE don't
>> work !?
>>
>> When i try to call alice from bob or bob from alice
>> ser
>> reply 404 not found !!!!!!!
>>
>> I wasted much time with ethereal to find the solution.
>>
>> Thanks for help
>>
>> Harry -:(
>>
>>
>> Chain INPUT (policy DROP 0 packets, 0 bytes)
>> pkts bytes target prot opt in out source
>> destination
>> 1273 885K ACCEPT all -- * *
>> 0.0.0.0/0 0.0.0.0/0 state
>> RELATED,ESTABLISHED
>> 7 429 ACCEPT all -- lo *
>> 0.0.0.0/0 0.0.0.0/0 state NEW
>> 70 4610 ACCEPT all -- eth0 *
>> 192.168.0.0/24 0.0.0.0/0 state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
>> state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
>> state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
>> state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:2401
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:53
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:123
>> state NEW
>> 0 0 ACCEPT icmp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 icmp type 0
>> code 0 state NEW
>> 0 0 ACCEPT icmp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 icmp type 8
>> code 0 state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:5060
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:5060
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp
>> dpts:35000:65000 state NEW
>> 678 32876 REJECT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> tcp-reset
>> 26 1994 REJECT all -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> icmp-net-prohibited
>>
>> Chain FORWARD (policy DROP 0 packets, 0 bytes)
>> pkts bytes target prot opt in out source
>> destination
>> 0 0 ACCEPT all -- * *
>> 0.0.0.0/0 0.0.0.0/0 state
>> RELATED,ESTABLISHED
>> 0 0 ACCEPT all -- eth0 *
>> 192.168.0.0/24 0.0.0.0/0 state NEW
>> 0 0 ACCEPT all -- * eth0
>> 192.168.0.0/24 0.0.0.0/0 state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
>> state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
>> state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
>> state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:2401
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:2401
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:53
>> state NEW
>> 0 0 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:53
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:123
>> state NEW
>> 0 0 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:123
>> state NEW
>> 0 0 ACCEPT icmp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 icmp type 0
>> code 0 state NEW
>> 0 0 ACCEPT icmp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 icmp type 8
>> code 0 state NEW
>> 0 0 ACCEPT icmp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 icmp type 0
>> code 0 state NEW
>> 0 0 ACCEPT icmp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 icmp type 8
>> code 0 state NEW
>> 0 0 ACCEPT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:5060
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:5060
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:5060
>> state NEW
>> 0 0 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:5060
>> state NEW
>> 0 0 ACCEPT udp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 udp
>> dpts:35000:65000 state NEW
>> 0 0 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp
>> dpts:35000:65000 state NEW
>> 0 0 REJECT tcp -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> tcp-reset
>> 0 0 REJECT all -- ppp0 *
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> icmp-net-prohibited
>> 0 0 REJECT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> tcp-reset
>> 0 0 REJECT all -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> icmp-net-prohibited
>>
>> Chain OUTPUT (policy DROP 1 packets, 164 bytes)
>> pkts bytes target prot opt in out source
>> destination
>> 2072 424K ACCEPT all -- * *
>> 0.0.0.0/0 0.0.0.0/0 state
>> RELATED,ESTABLISHED
>> 7 429 ACCEPT all -- * lo
>> 0.0.0.0/0 0.0.0.0/0 state NEW
>> 32 2432 ACCEPT all -- * eth0
>> 192.168.0.0/24 0.0.0.0/0 state NEW
>> 47 2820 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
>> state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:2401
>> state NEW
>> 80 5888 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:53
>> state NEW
>> 0 0 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:123
>> state NEW
>> 0 0 ACCEPT icmp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 icmp type 0
>> code 0 state NEW
>> 0 0 ACCEPT icmp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 icmp type 8
>> code 0 state NEW
>> 0 0 ACCEPT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 tcp dpt:5060
>> state NEW
>> 0 0 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp dpt:5060
>> state NEW
>> 0 0 ACCEPT udp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 udp
>> dpts:35000:65000 state NEW
>> 0 0 REJECT tcp -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> tcp-reset
>> 0 0 REJECT all -- * ppp0
>> 0.0.0.0/0 0.0.0.0/0 reject-with
>> icmp-net-prohibited
>>
>>
>>
>>
>>
>>
>>
>>
>> __________________________________________________________________
>> Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour
>> vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/
>
>
>
>> _______________________________________________
>> Serusers mailing list
>> serusers at lists.iptel.org
>> http://lists.iptel.org/mailman/listinfo/serusers
More information about the sr-users
mailing list