[Kamailio-Users] what is the best solution NAT problem

Ricky Gutierrez xserverlinux at yahoo.com
Sun Oct 12 22:42:03 CEST 2008


Hi list, I am trying to solve my nat problem with openser 1.3.2 and rtpproxy 1.1, I have my openser with 2 net cards.  I detail my scenario:


(192.168.10.1) LAN-eth1- Server Openser eth0-WAN (192.168.1.64)<-> NAT <-> ADSL dyndns <-> Internet <-> ADSL <-> NAT <->  UAC 

All my external clients are also behind an ADSL with address private ip and my server openser, I don't have ip it public but register a domain with dyndns and it configures it in my router adsl, I have access from out to my server through dyndns.

All my external clients configure them so that they use of address proxy the dyndns domain, my external clients register but when they call to another UAC that this behind the server openser is not audio, and if a UAC that this behind the server openser calls an external client the call doesn't arrive he fails.

I have open the ports UDP 5060:5065, 10000:20000, 35000:65000  
TCP: 5060  

some idea of like I can solve this problem?...

best regards all list 

rickygm

### LOG SIP ###


U +1.744617 192.168.10.30:5062 -> 192.168.10.1:5060
SIP/2.0 200 OK 
Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK2fc9.6c704556.0 
Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-de71d299 
Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
From: <sip:122 at gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 
To: <sip:113 at gnuforever.homelinux.com>;tag=a5f269a554788978 
Call-ID: 6f8c5fed-1d1d043e at 192.168.0.60 
CSeq: 102 INVITE 
User-Agent: Grandstream GXP2020 1.1.6.16 
Contact: <sip:113 at 192.168.10.30:5062;transport=udp> 
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE 
Content-Type: application/sdp 
Supported: replaces, timer 
Content-Length: 214 

v=0 
o=113 8000 8000 IN IP4 192.168.10.30 
s=SIP Call 
c=IN IP4 192.168.10.30 
t=0 0 
m=audio 5004 RTP/AVP 18 101 
a=sendrecv 
a=rtpmap:18 G729/8000 
a=ptime:30 
a=rtpmap:101 telephone-event/8000 
a=fmtp:101 0-11 

#
U +0.000481 192.168.1.64:5060 -> 190.184.35.4:5063
SIP/2.0 200 OK 
Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-de71d299 
Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
From: <sip:122 at gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 
To: <sip:113 at gnuforever.homelinux.com>;tag=a5f269a554788978 
Call-ID: 6f8c5fed-1d1d043e at 192.168.0.60 
CSeq: 102 INVITE 
User-Agent: Grandstream GXP2020 1.1.6.16 
Contact: <sip:113 at 192.168.10.30:5062;transport=udp> 
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE 
Content-Type: application/sdp 
Supported: replaces, timer 
Content-Length: 232 
P-hint: onreply_route|force_rtp_proxy  

v=0 
o=113 8000 8000 IN IP4 192.168.10.30 
s=SIP Call 
c=IN IP4 192.168.1.64 
t=0 0 
m=audio 35006 RTP/AVP 18 101 
a=sendrecv 
a=rtpmap:18 G729/8000 
a=ptime:30 
a=rtpmap:101 telephone-event/8000 
a=fmtp:101 0-11 
a=nortpproxy:yes 

#
U +0.219110 190.184.35.4:5063 -> 192.168.1.64:5060
ACK sip:113 at 192.168.10.30:5062;transport=udp SIP/2.0 
Via: SIP/2.0/UDP 192.168.0.60:5063;branch=z9hG4bK-547056da 
From: <sip:122 at gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 
To: <sip:113 at gnuforever.homelinux.com>;tag=a5f269a554788978 
Call-ID: 6f8c5fed-1d1d043e at 192.168.0.60 
CSeq: 102 ACK 
Max-Forwards: 70 
Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3>, <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113 at gnuforever.homelinux.com",algorithm=MD5,response="ec45ed24126b924160da73b8ba10e73d" 
Contact: <sip:122 at 192.168.0.60:5063> 
User-Agent: Linksys/SPA942-5.2.8 
Content-Length: 0 


#
U +0.000944 192.168.10.1:5060 -> 192.168.10.30:5062
ACK sip:113 at 192.168.10.30:5062;transport=udp SIP/2.0 
Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK2fc9.6c704556.2 
Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-547056da 
From: <sip:122 at gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 
To: <sip:113 at gnuforever.homelinux.com>;tag=a5f269a554788978 
Call-ID: 6f8c5fed-1d1d043e at 192.168.0.60 
CSeq: 102 ACK 
Max-Forwards: 69 
Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113 at gnuforever.homelinux.com",algorithm=MD5,response="ec45ed24126b924160da73b8ba10e73d" 
Contact: <sip:122 at 190.184.35.4:5063;nat=yes> 
User-Agent: Linksys/SPA942-5.2.8 
Content-Length: 0 


#
U +0.140447 192.168.1.64:5060 -> 190.184.35.4:5063
OPTIONS sip:190.184.35.4:5063 SIP/2.0 
Via: SIP/2.0/UDP 192.168.1.64:5060;branch=0 
From: sip:pinger at 192.168.1.64;tag=f7508b75 
To: sip:190.184.35.4:5063 
Call-ID: 29b7fe71-06901b84-fa6 at 192.168.1.64 
CSeq: 1 OPTIONS 
Content-Length: 0 


#
U +0.164881 190.184.35.4:5063 -> 192.168.1.64:5060
SIP/2.0 404 Not Found 
To: sip:190.184.35.4:5063;tag=a04ea06caeb3256i3 
From: sip:pinger at 192.168.1.64;tag=f7508b75 
Call-ID: 29b7fe71-06901b84-fa6 at 192.168.1.64 
CSeq: 1 OPTIONS 
Via: SIP/2.0/UDP 192.168.1.64:5060;branch=0 
Server: Linksys/SPA942-5.2.8 
Content-Length: 0 


#
U +1.195009 192.168.10.28:5060 -> 192.168.10.1:5060




#
U +0.639899 192.168.10.1:5060 -> 192.168.10.27:5060
OPTIONS sip:192.168.10.27:5060 SIP/2.0 
Via: SIP/2.0/UDP 192.168.10.1:5060;branch=0 
From: sip:pinger at 192.168.1.64;tag=08508b75 
To: sip:192.168.10.27:5060 
Call-ID: 29b7fe71-16901b84-1b6 at 192.168.10.1 
CSeq: 1 OPTIONS 
Content-Length: 0 


#
U +0.001412 192.168.10.27:5060 -> 192.168.10.1:5060
SIP/2.0 200 OK 
Via: SIP/2.0/UDP 192.168.10.1:5060;branch=0 
From: sip:pinger at 192.168.1.64;tag=08508b75 
To: sip:192.168.10.27:5060;tag=b1e56101b3b09b53 
Call-ID: 29b7fe71-16901b84-1b6 at 192.168.10.1 
CSeq: 1 OPTIONS 
User-Agent: Grandstream GXV3000 1.1.3.14 
Contact: <sip:120 at 192.168.10.27:5060> 
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK 
Supported: replaces, timer, 100rel, path 
Content-Length: 0 


#
U +3.393457 190.184.35.4:5063 -> 192.168.1.64:5060
BYE sip:113 at 192.168.10.30:5062;transport=udp SIP/2.0 
Via: SIP/2.0/UDP 192.168.0.60:5063;branch=z9hG4bK-f7539b7 
From: <sip:122 at gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 
To: <sip:113 at gnuforever.homelinux.com>;tag=a5f269a554788978 
Call-ID: 6f8c5fed-1d1d043e at 192.168.0.60 
CSeq: 103 BYE 
Max-Forwards: 70 
Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3>, <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113 at 192.168.10.30:5062",algorithm=MD5,response="4416adbfacebc76ed9cc3f002ff958a1" 
User-Agent: Linksys/SPA942-5.2.8 
Content-Length: 0 


#
U +0.000768 192.168.10.1:5060 -> 192.168.10.30:5062
BYE sip:113 at 192.168.10.30:5062;transport=udp SIP/2.0 
Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK3fc9.1cba8107.0 
Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-f7539b7 
From: <sip:122 at gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 
To: <sip:113 at gnuforever.homelinux.com>;tag=a5f269a554788978 
Call-ID: 6f8c5fed-1d1d043e at 192.168.0.60 
CSeq: 103 BYE 
Max-Forwards: 69 
Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113 at 192.168.10.30:5062",algorithm=MD5,response="4416adbfacebc76ed9cc3f002ff958a1" 
User-Agent: Linksys/SPA942-5.2.8 
Content-Length: 0 


#
U +0.055972 192.168.10.30:5062 -> 192.168.10.1:5060
SIP/2.0 200 OK 
Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK3fc9.1cba8107.0 
Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-f7539b7 
Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> 
From: <sip:122 at gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 
To: <sip:113 at gnuforever.homelinux.com>;tag=a5f269a554788978 
Call-ID: 6f8c5fed-1d1d043e at 192.168.0.60 
CSeq: 103 BYE 
User-Agent: Grandstream GXP2020 1.1.6.16 
Contact: <sip:113 at 192.168.10.30:5062;transport=udp> 
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE 
Supported: replaces, timer 
Content-Length: 0 


      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20081012/0ce529c0/attachment.htm>


More information about the sr-users mailing list