[Serusers] How to gaurd PSTN gateway with openser + NAT

[Klaus Darilion]

Lokesh Kumar wrote:
> Hello Friends,
> 
> I installed openser, it is working fine. sipsak-0.9.0 is also working fine,
> previously i was using 0.9.2 version of sipsak that is having problem.
> 
> Now I want to ask you 2 important things.
> 
> 1>> Forget Asterisk for sometime, I am having a openser with one public IP
> and one private IP, and I am having one voip gateway which is connected to
> E1 PRI, and voip gateway is also having private IP. So, my question is can I
> forward all the calls coming on public IP of openser to voip gateway via
> private IP's of openser and voip gateway.After that voip gateway will
> forward the call to E1 PRI.
> SER Admin guide mentioned about how to gaurd your PSTN gateway with SER, but
> the documentation is not suffciente there. So, can you please suggest in
> this scenario, how do i can configure request routing in openser, like
> pstn.cfg file.

Forward should work in multi-home mode. To protect the gateway make sure 
that:
- the gateway accepts only requests from your SIP proxy
- the SIP proxy authenticates/accounts each request sent to the gateway. 
Thus, make sure that someone can't use the SIP proxy as relay to the GW 
(as the GW trusts your SIP proxy).


> 2>> How do I have to register SIP phone on openser. Where the sip phones are
> behind the NAT, but NAT device supports STUN and UPnP. Do I need to setup
> seperate STUN server or I can run this service on openser server.

You do not need a seperate PC for the stun server. The stun server can 
be located on the same PC as openser. The only important thing is that 
this PC withthe stun server needs two public IP addresses (that's how 
stun works). Also make sure to make SRV entries for the stun server. 
Then the clients (eg. eyebeam) can find the stun server automatically.

_stun._udp.yourdomain.com SRV    stun.yourdomain.com
stun.yourdomain.com    A         1.2.3.4

regards
klaus

> 
> Please help.
> Regards
> Lokesh
> 
> 
> ----- Original Message -----
> From: <deepak.dhiman at uf4.net>
> To: "Lokesh Kumar" <lokesh at interacesso.pt>
> Sent: Tuesday, November 15, 2005 8:42 PM
> Subject: Re: Need Help in configuring Asterisk with SER and PSTN gateway
> 
> 
> 
>>Hi Lokesh !
>>
>>here i am writing my own experience baed views and facts: -
>>
>>1) openser i certainly better than ser with better nat handling tricks, it
>>also has got TLS support first time ina sip server and certain other
>>enhanced feature are alo there, that can be find out on www.voip-info.org
>>
>>2)sipsak is working fine on my pc and i really had no problem in
> 
> installing
> 
>>it, i have installed vesion sipsak-0.9.0
>>
>>3) i have not istalled any ser administrative program, so i can't tell you
>>which one is better.
>>
>>4) in case of Radius server try with radius 0.9.0.
>>
>>5) Finally, ser doesn't have any pstn support so you can't connect it to
> 
> the
> 
>>pstn gateway,
>>you can forward all sip packets to asterisk server and it would forward it
>>to pstn gateway and i think that's is the possible solution of your
> 
> problem.
> 
>>regards,
>>
>>Deepak
>>
>>Lokesh Kumar writes:
>>
>>
>>>Hello Deepak,
>>>
>>>Here are some of the questions which if you can respond then i will be
> 
> quite
> 
>>>happy.
>>>
>>>1>> What is the difference between SER and openSER and which one is best
> 
> to
> 
>>>adopt in terms of security and ease of use and customization.
>>>2>> I am unable to install sipsak on SER, it gives me error, when i
> 
> execute
> 
>>>make.
>>>3>> Which is the best web tool to manage SER, I tried SERweb and
> 
> SERadmin,
> 
>>>but unfortunately unable to configure them with SER
>>>4>> How do I have to setup a Voip trunk between asterisk and SER, where
> 
> SER
> 
>>>forwards any requests from asterisk to PSTN gateway.
>>>5>> How do I have to inter conect Radius with SER.
>>>
>>>I had searched everything on the internet but sufficiente documents are
> 
> not
> 
>>>available.
>>>
>>>Looking for your reply
>>>Thanks a lot
>>>Lokesh
>>>
>>>
>>>----- Original Message -----
>>>From: <deepak.dhiman at uf4.net>
>>>To: "Lokesh Kumar" <lokesh at interacesso.pt>
>>>Sent: Monday, November 14, 2005 8:49 PM
>>>Subject: Re: Need Help in configuring Asterisk with SER and PSTN gateway
>>>
>>>
>>>
>>>>Hi Lokesh !
>>>>
>>>>I think u can easily configure it, let me know what have u tried so far
> 
> so
> 
>>>>that i can tell u exactly where is the problem..
>>>>
>>>>regard,
>>>>
>>>>Deepak
>>>>
>>>>Lokesh Kumar writes:
>>>>
>>>>
>>>>>Hello,
>>>>>
>>>>>Deepak,
>>>>>
>>>>>I got your mail from the asterisk lists. I wanted to ask you about
> 
> how
> 
>>>you had configured asterisk with SER. I am facing lots of difficulties
> 
> with
> 
>>>configuration of asterisk with SER. Can you please guide me . I will be
> 
> very
> 
>>>thankfull to you.
>>>
>>>>>Regards
>>>>>
>>>>
>>>>
>>>>
>>>>Software Engg. Trainee
>>>>Trail  Ridge Software India Pvt. Ltd.
>>>>Noida
>>>>
>>>
>>
>>
>>Software Engg. Trainee
>>Trail  Ridge Software India Pvt. Ltd.
>>Noida
>>
> 
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 
>