[Users] SER as proxy in front of Asterisk

[Daniel-Constantin Mierla]

I have seen some soho routers which do not display the SIP ALG option on 
the web configuration page -- you had to do kind of telnet to get access 
to more options.

To see if there is a SIP alg inside the router, set the proxy to use a 
different port than 5060 and configure the phone to sent the request 
there. Also, configure your phone on other port as well. See if works in 
this case.

Cheers,
Daniel


On 01/04/07 10:31, Thomas Deillon wrote:
> Behind a PIX, it works
> Behind a SonicWall without the SIP_aware option, it doesn't work
> Behind a Watchguard, it doesn't work too (and there is no SIP_aware option)
>
> In fact, I have a centrex IP and many clients in the country with, many different configurations and I have to be sure that all works. It's why I have no enable the SIP_aware option in the sonicwall.
>
> Thanks for your help,
>
> Thomas 
>
>
>
> -----Message d'origine-----
> De : users-bounces at openser.org [mailto:users-bounces at openser.org] De la part de Thomas Deillon
> Envoyé : mercredi, 3. janvier 2007 17:06
> À : daniel at voice-system.ro
> Cc : users at openser.org
> Objet : RE: [Users] SER as proxy in front of Asterisk
>
> Hi,
>
> In fact, now, every phone does not response.
> The options didn't go thought the FW, so, the phone cannot answer.
> I don't understand why the traffic don't go thought it !!
> I have test this configuration with two firewall: a sonicwall and a soho.
>
> Cheers,
>
> Thomas 
>
> -----Message d'origine-----
> De : Daniel-Constantin Mierla [mailto:daniel at voice-system.ro] 
> Envoyé : mercredi, 3. janvier 2007 14:52
> À : Thomas Deillon
> Cc : users at openser.org
> Objet : Re: [Users] SER as proxy in front of Asterisk
>
> Hello,
>
> what is the type of NAT/Firewall you have in front of Thomson? As I can 
> see from the diagram, the phone does not reply to OPTIONS request, and I 
> guess, the nat/firewall needs outward traffic to keep the pinhole open. 
> Check why thomson ignores the options requests.
>
> Cheers,
> Daniel
>
>
> On 01/03/07 15:17, Thomas Deillon wrote:
>   
>> Hi,
>>
>> I have made more tries and now, all my phones don't work ...
>>
>> The firewall opens a connection to REGISTER phone but after a while 
>> the OPTION message from the Asterisk will be DROP by the FW ...
>>
>> You can find a diagram of the exchange here: 
>> http://deillon.eu/tmp/exchange_sip.png
>>
>> A list of all exchange: http://deillon.eu/tmp/ip_sip.txt
>>
>> And all sip message: http://deillon.eu/tmp/message.txt
>>
>> Thanks a lot for your help,
>>
>> Thomas
>>
>> ------------------------------------------------------------------------
>>
>> *De :* users-bounces at openser.org [mailto:users-bounces at openser.org] 
>> *De la part de* Thomas Deillon
>> *Envoyé :* mardi, 2. janvier 2007 11:44
>> *À :* users at openser.org
>> *Objet :* [Users] SER as proxy in front of Asterisk
>>
>> Hi all,
>>
>> I wish you first a happy new year !!
>> One again, I ask you some help. Thanks a lot for your patience and 
>> your answers that really helped me.
>>
>> So, I want to put a SER in front of one Asterisk for the moment (more 
>> after).
>> All Servers have public IP address and so, I don't care about the 
>> RTP/SDP messages.
>> All phones are behind NAT somewhere in Switerland :)
>>
>>
>> I have the configuration below in openser:
>>
>>
>> modparam("dispatcher", "list_file", "/etc/openser/dispatcher.list")
>> #modparam("dispatcher", "force_dst", 1)
>> modparam("dispatcher", "flags", 2)
>>
>> modparam("usrloc", "db_mode", 0)
>> #modparam("rr", "enable_full_lr", 1)
>>
>> route{
>>
>>
>> xlog("L_ALERT", "[$rm] from [$fu] to [$tu]\n");
>>
>> if (!mf_process_maxfwd_header("10")) {
>> sl_send_reply("483","Too Many Hops");
>> exit;
>> };
>>
>> if (msg:len >= 2048 ) {
>> sl_send_reply("513", "Message too big");
>> exit;
>> };
>>
>> # if (search("User-Agent:.*Thomson.*")) {
>> # };
>>
>>
>> if ((src_ip==212.xxx.xxx.152) || (src_ip==212.xxx.xxx.153)) {
>> if(method=="OPTIONS") {
>> };
>> avp_pushto("$ru","$tu");
>> forward();
>>
>> }else {
>> fix_nated_contact();
>> force_rport();
>> if(method=="REGISTER"){
>> ds_select_dst("4", "0");
>> t_relay();
>> }
>> else {
>> ds_select_dst("0", "4");
>> forward();
>> }
>> }
>> }
>>
>>
>> And in my dispatcher.list I have:
>>
>> 0 sip:212.xxx.xxx.153:5060
>> 4 sip:212.xxx.xxx.153:5060
>>
>>
>>
>> With this configuration, a snom phone, a X-lite phone and a Cisco 
>> phone seams to work ....
>> But with the Thomson ST2030, it doesn't work.
>> In fact, the Thomson REGISTER on asterisk, the Asterisk send a OPTION 
>> message to the FW IP adress and the right port where the thomson is 
>> and then, after a while, the FW close the connection. The thomson 
>> phone is so "UNREACHABLE" on asterisk status and nobody can call it.
>> I'm not sure that my configuration is ok in ser but I think that is a 
>> problem with the Thomson2030. Do you had the same kind of problem or 
>> do you understand the problem here ?
>>
>>
>> Thanks for your help,
>>
>> Thomas Deillon
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Users mailing list
>> Users at openser.org
>> http://openser.org/cgi-bin/mailman/listinfo/users
>>   
>>     
>
> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users
>
>