[Freeswitch-users] Natting question.

[Steven Ayre]

So to clarify:

Client -> Internet -> NAT -> FS
works

Client -> NAT -> Internet -> NAT -> FS
does not?

Since the FS NAT side appears to be working (from the 1st case), I'm
guessing it's probably either a problem at the client side (with client or
NAT router) or perhaps the double-NAT is causing an issue. Personally I
haven't run FS behind NAT, so it's not a situation I've had to handle.

Do a packet trace of a call at both the client and FS ends. The FS end is
easy - "sofia global siptrace on if you have low volumes, or a tool like
tcpdump/ngrep if you have higher volumes. FS will actually log the SDP
information in at debug-level console logs and in XML CDRs. At the client
side try using Wireshark on the client PC.

Compare the SDP information of the call, to check the IP and ports seen at
either end. Check whether they look reasonable. FS will need to see the
public IP of the client, and the client see the public IP of FS for audio
to work in both directions. The FS/client may not need to know their public
IP on the internal side of the router as many routers have SIP ALG that
will rewrite the internal IP to an external one, but if the client has
already done so that often causes more problems than it solves.

FS can handle only knowing the internal IP of the client if they're able to
send RTP to FS - it will see the IP/port the audio is coming from and send
audio back to that address. That does mean audio won't work on such a call
until it has received RTP from the client though.

-Steve







On 10 December 2012 13:59, Mimiko <vbvbrj at gmail.com> wrote:

> Hello.
>
> I have a FS behind firewall on which ports 5080,5060 udp are mapped to
> the FS server. A client connected directly to Internet, say using GPRS,
> authorise to FS and calling a number audio is heared. When this client
> is connected via WiFi to some router connected directly to Internet,
> client authorises, calls but there is no audio.
>
> So I'm stump on where to look for issue: on FS server side with firewall
> or on client side behind router?
>
> Thank you.
> --
> Mimiko desu.
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20121210/375a9c8a/attachment.html