[Freeswitch-users] Created new profile for double-natted phones, calling these fails with USER_NOT_REGISTERED

[Alex Crow]

On 05/12/11 13:04, Anthony Cosgrove wrote:
> Alex,
>
> Does FS *have* to be behind a NAT? Are you doing a straight 1:1 from public to private (FS side)? What kind of router/firewall are you using on the FS side and endpoint sides? You'll will probably want to lower the endpoint registration times from the normal default of 1 hour to 180 seconds (3 minutes) or even lower depending on router/firewall. You may also want to turn on keep-alive packets to keep the data flowing in/out. What you are running into is either one or both sides are closing off 5060/udp early, FS is marking the registration as dead.
>

Anthony,

No, it's definitely not that - the registration is alive and well. The 
issue is that FS sees that the user is not registered on the internal 
sip profile and doesn't check the doublenat profile.

The router/firewall is iptables (shorewall) and I'm doing a DNAT of the 
relevant ports to the FS box.

What I have found is that I can specify the dialstring for the external 
users in the directory entries, eg:

<param name="dial-string" 
value="{sip_invite_domain=${domain_name},presence_id=${dialed_user}@${dialed_domain}}${sofia_contact(doublenat/${dialed_user}@${dialed_domain})}"/>


> Best thing to do is to place FS in a DMZ or install a public facing SBC to take the registrations and forward them on to FS internally.
>

Yes, it would probably be better that way, but this is really mostly for 
internal use.

Cheers

Alex

>
> Anthony
>
> On Dec 5, 2011, at 7:09 AM, Alex Crow wrote:
>
>> Hi all,
>>
>> I have set up a new profile for phones behind NAT connecting to an FS
>> box behind NAT. Calls in from a NAT'ed phone works fine, however calls
>> out to one fail with USER_NOT_REGISTERED. All the phones are set up in
>> /opt/freeswitch/conf/directory/default/<sip id>.
>>
>> I have added the following in the new profile config hoping it would
>> resolve the issue but it does not:
>>
>> <param name="challenge-realm" value="$${domain}"/>
>> <param name="force-subscription-domain" value="$${domain}"/>
>> <param name="force-register-domain" value="$${domain}"/>
>> <param name="force-register-db-domain" value="$${domain}"/>
>>
>> Any clues?
>>
>> Thanks
>>
>> Alex
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>


-- 
This message is intended only for the addressee and may contain
confidential information.  Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.

"Transact" is operated by Integrated Financial Arrangements plc
Domain House, 5-7 Singer Street, London  EC2A 4BQ
Tel: (020) 7608 4900 Fax: (020) 7608 5300
(Registered office: as above; Registered in England and Wales under number: 3727592)
Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)