[Users] SER as proxy in front of Asterisk

Thomas Deillon Thomas.Deillon at smart-telecom.ch
Wed Jan 3 17:06:13 CET 2007


Hi,

In fact, now, every phone does not response.
The options didn't go thought the FW, so, the phone cannot answer.
I don't understand why the traffic don't go thought it !!
I have test this configuration with two firewall: a sonicwall and a soho.

Cheers,

Thomas 

-----Message d'origine-----
De : Daniel-Constantin Mierla [mailto:daniel at voice-system.ro] 
Envoyé : mercredi, 3. janvier 2007 14:52
À : Thomas Deillon
Cc : users at openser.org
Objet : Re: [Users] SER as proxy in front of Asterisk

Hello,

what is the type of NAT/Firewall you have in front of Thomson? As I can 
see from the diagram, the phone does not reply to OPTIONS request, and I 
guess, the nat/firewall needs outward traffic to keep the pinhole open. 
Check why thomson ignores the options requests.

Cheers,
Daniel


On 01/03/07 15:17, Thomas Deillon wrote:
>
> Hi,
>
> I have made more tries and now, all my phones don't work ...
>
> The firewall opens a connection to REGISTER phone but after a while 
> the OPTION message from the Asterisk will be DROP by the FW ...
>
> You can find a diagram of the exchange here: 
> http://deillon.eu/tmp/exchange_sip.png
>
> A list of all exchange: http://deillon.eu/tmp/ip_sip.txt
>
> And all sip message: http://deillon.eu/tmp/message.txt
>
> Thanks a lot for your help,
>
> Thomas
>
> ------------------------------------------------------------------------
>
> *De :* users-bounces at openser.org [mailto:users-bounces at openser.org] 
> *De la part de* Thomas Deillon
> *Envoyé :* mardi, 2. janvier 2007 11:44
> *À :* users at openser.org
> *Objet :* [Users] SER as proxy in front of Asterisk
>
> Hi all,
>
> I wish you first a happy new year !!
> One again, I ask you some help. Thanks a lot for your patience and 
> your answers that really helped me.
>
> So, I want to put a SER in front of one Asterisk for the moment (more 
> after).
> All Servers have public IP address and so, I don't care about the 
> RTP/SDP messages.
> All phones are behind NAT somewhere in Switerland :)
>
>
> I have the configuration below in openser:
>
>
> modparam("dispatcher", "list_file", "/etc/openser/dispatcher.list")
> #modparam("dispatcher", "force_dst", 1)
> modparam("dispatcher", "flags", 2)
>
> modparam("usrloc", "db_mode", 0)
> #modparam("rr", "enable_full_lr", 1)
>
> route{
>
>
> xlog("L_ALERT", "[$rm] from [$fu] to [$tu]\n");
>
> if (!mf_process_maxfwd_header("10")) {
> sl_send_reply("483","Too Many Hops");
> exit;
> };
>
> if (msg:len >= 2048 ) {
> sl_send_reply("513", "Message too big");
> exit;
> };
>
> # if (search("User-Agent:.*Thomson.*")) {
> # };
>
>
> if ((src_ip==212.xxx.xxx.152) || (src_ip==212.xxx.xxx.153)) {
> if(method=="OPTIONS") {
> };
> avp_pushto("$ru","$tu");
> forward();
>
> }else {
> fix_nated_contact();
> force_rport();
> if(method=="REGISTER"){
> ds_select_dst("4", "0");
> t_relay();
> }
> else {
> ds_select_dst("0", "4");
> forward();
> }
> }
> }
>
>
> And in my dispatcher.list I have:
>
> 0 sip:212.xxx.xxx.153:5060
> 4 sip:212.xxx.xxx.153:5060
>
>
>
> With this configuration, a snom phone, a X-lite phone and a Cisco 
> phone seams to work ....
> But with the Thomson ST2030, it doesn't work.
> In fact, the Thomson REGISTER on asterisk, the Asterisk send a OPTION 
> message to the FW IP adress and the right port where the thomson is 
> and then, after a while, the FW close the connection. The thomson 
> phone is so "UNREACHABLE" on asterisk status and nobody can call it.
> I'm not sure that my configuration is ok in ser but I think that is a 
> problem with the Thomson2030. Do you had the same kind of problem or 
> do you understand the problem here ?
>
>
> Thanks for your help,
>
> Thomas Deillon
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users
>   




More information about the sr-users mailing list