[Freeswitch-users] [Freeswitch-dev] Call for help - adding information to the wiki: SIP ALG's

[Tihomir Culjaga]

well .. thats a know thing.. SIP ALG is to be disabled on every router as
this is not the way NAT traversal is donoe for SIP...

This is something a border element (SBC) on carrier side has to deal with.
If some "intelligent" router thinks it can "fix" the translation it actually
screws it from the border element perspective and you will end up with
either failed call establishment or without audio.


I had a device (zxyel) that was using SIP ALG (hiden command that was
available via telnet only) and everything was fine for a while ... but after
some time my single device behnd NAT was not able to register to the
proviser because of a broken branch string.


so, just disable ALG for SIP on ALL devices you have on customer side .. it
really doesn't have any sense to keep it on.

T.





On Thu, Feb 25, 2010 at 8:58 PM, Michael Collins <msc at freeswitch.org> wrote:

> Gents,
> Thanks for all of your input on this. I see a few more entries on the ALG
> wiki page and that is exactly what I had hoped to see. Please keep up the
> good work.
>
> Thanks,
> MC
>
>
> On Thu, Feb 25, 2010 at 9:26 AM, Adam Ford <lists at redbonez.net> wrote:
>
>> I wish you would have told me that back when I was trying to solve my
>> authentication issue that I thought was being caused by using rport. :P
>>
>> You just told me to upgrade to 1.0.5, when a $%$#! Sonicwall SIP ALG would
>> have been more helpful, haha. As it turned out it was the Sonicwall SIP
>> transformations, and switching to TCP SIP resolved it.
>>
>> I have added my Sonicwall experience to the wiki page.
>>
>> -Adam
>>
>>
>> -----Original Message-----
>> From: freeswitch-users-bounces at lists.freeswitch.org
>> [mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Brian
>> West
>> Sent: Thursday, February 25, 2010 6:33 AM
>> To: freeswitch-users at lists.freeswitch.org
>> Subject: Re: [Freeswitch-users] [Freeswitch-dev] Call for help - adding
>> information to the wiki: SIP ALG's
>>
>> I believe all SIP ALG's are broken.  :P
>>
>> /b
>>
>> On Feb 25, 2010, at 2:43 AM, Mark Campbell-Smith wrote:
>>
>> > I had an issue with a Thomson SpeedTouch 530 router that was causing
>> > authentication to fail... its the thread titled 'Forbidden using UDP,
>> > works with TCP/TLS' that everyone said was caused by a broken ATA ...
>> > lucky no one chipped in so I could buy a new one (as suggested by
>> > Anthony) - it wouldn't have helped because the router was broken and
>> > modifying the authentication parameters!
>> >
>> > I'll update the wiki with the info
>>
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100225/9bb90360/attachment-0002.html