[Users] Problems registering NAT clients

[Paco Orozco]

Hello,

First of all, I'm spanish and my english isn't good, so please excuse my
mistakes.
I've been working with openser for a year. Now I'm modifying my SIP service
in order to allow clients in NAT scenarios.
I've read about symmetric / full cone / ... and other NAT scenarios. I've
read about mediaproxy / rtpproxy and nathelper modules.
I've got a openser.cfg working properly without NAT clients. And I've
modified it (see attach).

Client X-Lite:
IP: 192.168.1.2 (public address 81.39.220.5)
Listen SIP port: 5060
Listen RTP port: 8000

Server: Openser 1.0 with Media Proxy
IP: 147.83.197.39
Config in opernser.cfg

If i try to register with a UAC (X-Lite or K-Phone) with symmetric NAT
scenario. Opernser server doesn't answer the client to 5060 port, as i need.
X-Lite Diagnostic LOG is client_messages.txt
Client timed out without receiving any server messages.

This is a tcpdump on clients side:
17:42:23.458980 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
17:42:23.558019 IP 147.83.197.39.5060 > 192.168.1.2.10145: SIP, length: 538
17:42:23.558077 IP 192.168.1.2 > 147.83.197.39: ICMP 192.168.1.2 udp port
10145 unreachable, length 556
17:42:25.085485 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
17:42:28.108960 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
17:42:32.643903 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 2
17:42:34.156151 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448

On the server this is the tcpdump:
17:42:23.904035 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448
17:42:23.904261 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538
17:42:23.905028 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680
17:42:24.004623 IP 81.39.220.5 > 147.83.197.39: ICMP 81.39.220.5 udp port
10145 unreachable, length 556
17:42:25.525470 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448
17:42:25.525607 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538
17:42:25.526314 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680
17:42:28.549322 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448

What's wrong?

It's necessary to use a STUN server?
Why can't register?
Why openser doesn't reply to 5060 port? My client it's only reachable in
this.
Can anyone help me?
Anyone have a OpenSer config working?

Thanks in advance
--
-------------------------------------
Aquel que planta árboles bajo los
que sabe muy bien que nunca se
sentara, ha descubierto el auténtico
significado de la vida.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kamailio.org/pipermail/users/attachments/20060204/4b113438/attachment.htm 
-------------- next part --------------
© 2004 Xten Networks, Inc. All rights reserved.
X-Lite release 1105d build stamp 99999
License key: 286D6CC5B41D040C03AD89F27B0BACD4

Established SIP protocol listen on: 192.168.1.2:5060

NAT firewall type discovered is forced.



SIP: 192.168.1.2:5060
RTP: 192.168.1.2:8000
NAT: 81.39.220.5

PROXY#0: 147.83.197.39:5060


SEND TIME: 905293715
SEND >> 147.83.197.39:5060
REGISTER sip:upcnet.es SIP/2.0
Via: SIP/2.0/UDP 192.168.1.2:5060;rport;branch=z9hG4bK4772C00A5444B9D05D79FD2893DA3209
From: paco.orozco <sip:paco.orozco at upcnet.es>;tag=53061238
To: paco.orozco <sip:paco.orozco at upcnet.es>
Contact: "paco.orozco" <sip:paco.orozco at 192.168.1.2:5060>
Call-ID: 4D3A0F500947B2701672F1EA3DB51677 at upcnet.es
CSeq: 49742 REGISTER
Expires: 1800
Max-Forwards: 70
User-Agent: X-Lite release 1105d
Content-Length: 0


SEND TIME: 905295335
SEND >> 147.83.197.39:5060
REGISTER sip:upcnet.es SIP/2.0
Via: SIP/2.0/UDP 192.168.1.2:5060;rport;branch=z9hG4bK4772C00A5444B9D05D79FD2893DA3209
From: paco.orozco <sip:paco.orozco at upcnet.es>;tag=53061238
To: paco.orozco <sip:paco.orozco at upcnet.es>
Contact: "paco.orozco" <sip:paco.orozco at 192.168.1.2:5060>
Call-ID: 4D3A0F500947B2701672F1EA3DB51677 at upcnet.es
CSeq: 49742 REGISTER
Expires: 1800
Max-Forwards: 70
User-Agent: X-Lite release 1105d
Content-Length: 0
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openser.cfg
Type: application/octet-stream
Size: 15846 bytes
Desc: not available
Url : http://lists.kamailio.org/pipermail/users/attachments/20060204/4b113438/attachment.obj