[Kamailio-Users] what is the best solution NAT problem

Iñaki Baz Castillo ibc at aliax.net
Sun Oct 12 23:43:16 CEST 2008


El Domingo, 12 de Octubre de 2008, Ricky Gutierrez escribió:
> (192.168.10.1) LAN-eth1- Server Openser eth0-WAN (192.168.1.64)<-> NAT <->
> ADSL dyndns <-> Internet <-> ADSL <-> NAT <-> UAC
>
> All my external clients are also behind an ADSL with address private ip and
> my server openser, I don't have ip it public but register a domain with
> dyndns and it configures it in my router adsl, I have access from out to my
> server through dyndns.

OpenSer behind a NAT router with dynamic IP? It's really an annoying scenario.

Note that when the INVITE/200/(ACK) comes from the LAN 192.168.10.X and goes 
through OpenSer, you must replace the media IP in the SDP and the IP 
in "Contact" with the **public** IP of the LAN router, that is a dynamic IP 
and AFAIK it's not valid to set a domain in the SDP.

And when he INVITE/200/(ACK) comes from Internet and goes through OpenSer, you 
must replace the media IP in the SDP and IP in "Contact" with the eth1 IP of 
RtpProxy (19.168.10.1).

Also, you need the SIP ports and RtpProxy media ports redirected in the router 
to the RtpProxy server.

Anyway, this scenario is not appropiate for a businnes service.


> I have open the ports UDP 5060:5065, 10000:20000, 35000:65000  
> TCP: 5060  

Why do you open all these ports? and what do you mean with "open"? don't you 
mean "redirected"?

PD: A suggestion: Buy an space in a datacenter (a virtual machine could be 
enough depending on your traffic ammount) and install the OpenSer and 
RtpProxy decently in a host with public IP.

-- 
Iñaki Baz Castillo




More information about the sr-users mailing list