[Serusers] Re: [Serdev] How to gaurd PSTN gateway with openser + NAT

[Klaus Darilion]

Hi Lokesh!

First you install a STUN server. Then, the clients use this STUN server 
to detect the kind of NAT. If the detected NAT can be traversed by STUN, 
then they use the public_IP:public:port in the SIP messages. Thus, the 
sip proxy can not (need not) differ between clients with public IP and 
clients with NAT+STUN.

If the NAT can't be traversed by STUN or the client does not support 
STUN, then the SIP proxy should take care of it. You can use the 
functions of the nathelper module to:
1. detect if the client is behind nat
2. to rewrite the SIP message
3. to force an RTP relay (rtpproxy)

instead of nathelper+rtpproxy you can also use mediaproxy module + 
mediaproxy from ag-projects.

regards
klaus

Lokesh Kumar wrote:
> Hello Nils,
> 
> Attached is the mentioned files you asked me to send. As you said,  after
> disabling gnutls in configure, I can compile it. It works fine . Thanks for
> your kind help.
> 
> One important question I would like to ask you.
> 
> Suppose I am having 100 SIP clients, all of them are behind their respective
> 100 NAT's, The NAT devices are assigned public IP dynamically. What besides
> openser do I need on my SIP server to traverse those NAT's. Assume NAT's
> does not support STUN. Do I need to put STUN or Mediaproxy/RTPProxy server
> on my SIP server. If not , then how could i can manage such network.
> 
> Thanks a lot for your kind help
> 
> Best Regards
> 
> Lokesh
> 
> 
> ----- Original Message -----
> From: "Nils Ohlmeier" <lists at ohlmeier.org>
> To: "Lokesh Kumar" <lokesh at interacesso.pt>
> Sent: Thursday, November 17, 2005 10:14 PM
> Subject: Re: [Serdev] How to gaurd PSTN gateway with openser + NAT
> 
> 
> 
>>Hello Lokesh,
>>
>>could you do me a favor and send me config.h and config.log from the
> 
> directory
> 
>>where you tried to compile 0.9.2?
>>
>>After you send me the files you could try the following command
>>'./configure --disable-gnutls' and afterwards 'make'. I think that should
> 
> help
> 
>>to compile sipsak-0.9.2 on your system.
>>
>>Thanks
>>  Nils
>>
>>On Friday 18 November 2005 19:54, you wrote:
>>
>>>Hello Nils,
>>>
>>>When I do make in the source directory of sipsak-0.9.2, it gives me
> 
> error
> 
>>>like this.
>>>
>>>/usr/lib/libgnutls-openssl.so: undefined reference to
>>>'asn1_delete_structue' /usr/lib/libgnutls-openssl.so: undefined
> 
> reference
> 
>>>to 'asn1_create_element' /usr/lib/libgnutls-openssl.so: undefined
> 
> reference
> 
>>>to 'asn1_der_decoding' collect2: ld returned 1 exit status
>>>make[1]: ***[spsak] Error 1
>>>make[1]: Leaving directory '/usr/src/sipsak-0.9.2'
>>>make: *** [all] Error 2
>>>
>>>But there is no such problem with 0.9.0 version.
>>>
>>>Regards
>>>
>>>Lokesh
>>>
>>>
>>>----- Original Message -----
>>>From: "Nils Ohlmeier" <lists at ohlmeier.org>
>>>To: <serdev at lists.iptel.org>
>>>Cc: "Lokesh Kumar" <lokesh at interacesso.pt>; <deepak.dhiman at uf4.net>;
>>><serusers at lists.iptel.org>
>>>Sent: Thursday, November 17, 2005 6:05 PM
>>>Subject: Re: [Serdev] How to gaurd PSTN gateway with openser + NAT
>>>
>>>
>>>>Hello Lokesh,
>>>>
>>>>On Friday 18 November 2005 01:27, Lokesh Kumar wrote:
>>>>
>>>>>I installed openser, it is working fine. sipsak-0.9.0 is also
> 
> working
> 
>>>fine,
>>>
>>>
>>>>>previously i was using 0.9.2 version of sipsak that is having
> 
> problem.
> 
>>>>I would really appreciate it if you could describe we what problems
> 
> you
> 
>>>had
>>>
>>>
>>>>with sipsak 0.9.2. Then I could try to fix it, if it is a bug in
> 
> sipsak.
> 
>>>>Thanks
>>>>  Nils
> 
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 
>