[Freeswitch-users] Created new profile for double-natted phones, calling these fails with USER_NOT_REGISTERED

[Rob Hutton]

Alex -

Check out the presense settings.  Make sure both profiles are using the same DB:



On Monday 05 December 2011 08:19:33 Alex Crow wrote:
> On 05/12/11 13:04, Anthony Cosgrove wrote:
> > Alex,
> >
> > Does FS *have* to be behind a NAT? Are you doing a straight 1:1 from public to private (FS side)? What kind of router/firewall are you using on the FS side and endpoint sides? You'll will probably want to lower the endpoint registration times from the normal default of 1 hour to 180 seconds (3 minutes) or even lower depending on router/firewall. You may also want to turn on keep-alive packets to keep the data flowing in/out. What you are running into is either one or both sides are closing off 5060/udp early, FS is marking the registration as dead.
> >
> 
> Anthony,
> 
> No, it's definitely not that - the registration is alive and well. The 
> issue is that FS sees that the user is not registered on the internal 
> sip profile and doesn't check the doublenat profile.
> 
> The router/firewall is iptables (shorewall) and I'm doing a DNAT of the 
> relevant ports to the FS box.
> 
> What I have found is that I can specify the dialstring for the external 
> users in the directory entries, eg:
> 
> <param name="dial-string" 
> value="{sip_invite_domain=${domain_name},presence_id=${dialed_user}@${dialed_domain}}${sofia_contact(doublenat/${dialed_user}@${dialed_domain})}"/>
> 
> 
> > Best thing to do is to place FS in a DMZ or install a public facing SBC to take the registrations and forward them on to FS internally.
> >
> 
> Yes, it would probably be better that way, but this is really mostly for 
> internal use.
> 
> Cheers
> 
> Alex
> 
> >
> > Anthony
> >
> > On Dec 5, 2011, at 7:09 AM, Alex Crow wrote:
> >
> >> Hi all,
> >>
> >> I have set up a new profile for phones behind NAT connecting to an FS
> >> box behind NAT. Calls in from a NAT'ed phone works fine, however calls
> >> out to one fail with USER_NOT_REGISTERED. All the phones are set up in
> >> /opt/freeswitch/conf/directory/default/<sip id>.
> >>
> >> I have added the following in the new profile config hoping it would
> >> resolve the issue but it does not:
> >>
> >> <param name="challenge-realm" value="$${domain}"/>
> >> <param name="force-subscription-domain" value="$${domain}"/>
> >> <param name="force-register-domain" value="$${domain}"/>
> >> <param name="force-register-db-domain" value="$${domain}"/>
> >>
> >> Any clues?
> >>
> >> Thanks
> >>
> >> Alex
> >>
> >> _________________________________________________________________________
> >> Professional FreeSWITCH Consulting Services:
> >> consulting at freeswitch.org
> >> http://www.freeswitchsolutions.com
> >>
> >> 
> >> 
> >>
> >> Official FreeSWITCH Sites
> >> http://www.freeswitch.org
> >> http://wiki.freeswitch.org
> >> http://www.cluecon.com
> >>
> >> FreeSWITCH-users mailing list
> >> FreeSWITCH-users at lists.freeswitch.org
> >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> >> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> >> http://www.freeswitch.org
> >
> > _________________________________________________________________________
> > Professional FreeSWITCH Consulting Services:
> > consulting at freeswitch.org
> > http://www.freeswitchsolutions.com
> >
> > 
> > 
> >
> > Official FreeSWITCH Sites
> > http://www.freeswitch.org
> > http://wiki.freeswitch.org
> > http://www.cluecon.com
> >
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
> >
> 
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20111205/3769faf3/attachment.html