[Freeswitch-users] FS uses private rtp address in the SDP

Miguel Oyarzo miguelaustro at gmail.com
Mon Aug 18 06:08:20 MSD 2014


Hi,
When I told you about ACL, it  was because this is a normal
misunderstanding.
ACL helps to determinate what is considered as a local and external address.

Have you checked if the INVITE arrives with an IP address within your local
network?
If so, that will produce a 200 OK response with an local IP into the SDP
message .

use tcpdump, ngrep or any other tool to determinate IP addresses involved
in your scenario.

Regard,



On Sun, Aug 17, 2014 at 3:26 PM, afshin afzali <a.afzali2003 at gmail.com>
wrote:

> mod_commands.c:642 nat_map API called while NAT not initialized
>
> Is that my problem?
>
>
> On Sat, Aug 16, 2014 at 9:15 PM, afshin afzali <a.afzali2003 at gmail.com>
> wrote:
>
>> Appreciate that,
>> You used stun protocol to detect external IP address although I'm using
>> the exact address so I think it makes no difference.
>>
>> I would appreciate if I know in which conditions FreeSWITCH uses public
>> IP address in SDP protocol.
>>
>>
>> On Saturday, August 16, 2014, Douglas Adami <
>> webmaster.rumodigital at gmail.com> wrote:
>>
>>> Hi Afshin,
>>>
>>> I have the same scenario as you and 100% functional, this is my setup.
>>>
>>> <X-PRE-PROCESS cmd="set" data="external_rtp_ip=stun:stun.freeswitch.org
>>> "/>
>>> <X-PRE-PROCESS cmd="set" data="external_sip_ip=stun:stun.freeswitch.org
>>> "/>
>>>
>>> <param name="apply-nat-acl" value="nat.auto"/>
>>>
>>> <param name="rtp-ip" value="$${local_ip_v4}"/>
>>> <param name="sip-ip" value="$${local_ip_v4}"/>
>>> <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>
>>> <param name="ext-sip-ip" value="$${external_sip_ip}"/>
>>>
>>> I'm new around here, so let's wait for a response from some expert.
>>>
>>> good settings
>>>
>>> Doug
>>>
>>>
>>> On Sat, Aug 16, 2014 at 2:02 PM, afshin afzali <a.afzali2003 at gmail.com>
>>> wrote:
>>>
>>>> Hi Douglas,
>>>>
>>>> Thanks for your reply,
>>>> I)
>>>>
>>>> In my scenario both of FreeSWITCH and client are behind the firewall.
>>>>
>>>> II)
>>>>
>>>> <X-PRE-PROCESS cmd="set" data="bind_server_ip=auto"/>
>>>> <X-PRE-PROCESS cmd="set" data="external_rtp_ip=X.Y.Z.W"/>
>>>> <X-PRE-PROCESS cmd="set" data="external_sip_ip=X.Y.Z.W"/>
>>>>
>>>> I have a static public IP (for Freeswitch) and I know what it is so I
>>>> specified it explicitly.
>>>>
>>>> Do I have to set bind_server_ip to a specific IP in case of NAT
>>>> traversal as I specified local IP addresses for sip and rtp?
>>>>
>>>> III)
>>>> in the SIP profile
>>>> <param name="sip-ip" value="192.168.10.59"/>
>>>> <param name="rtp-ip" value="192.168.10.59"/>
>>>> <param name="ext-sip-ip" value="X.Y.Z.W"/>
>>>> <param name="ext-rtp-ip" value="X.Y.Z.W"/>
>>>> for apply-nat-acl I examined nat.auto, rfc1918, ... :(
>>>>
>>>> I did not refer to external_sip_ip / external_rtp_ip vaiables in the
>>>> SIP profile and explicitly defined external static IP.
>>>>
>>>>
>>>> BEST,
>>>>
>>>> Afshin
>>>>
>>>>
>>>>
>>>> On Sat, Aug 16, 2014 at 5:01 PM, Douglas Adami <
>>>> webmaster.rumodigital at gmail.com> wrote:
>>>>
>>>>> Hi,
>>>>>
>>>>> NAT scenario, correct?
>>>>> https://confluence.freeswitch.org/display/FREESWITCH/NAT+Traversal
>>>>>
>>>>> try this:
>>>>>
>>>>> vars.xml
>>>>> <X-PRE-PROCESS cmd="set" data="bind_server_ip=my.domain.com"/>
>>>>> <X-PRE-PROCESS cmd="set" data="external_sip_ip=stun:
>>>>> stun.freeswitch.org"/>
>>>>> <X-PRE-PROCESS cmd="set" data="external_rtp_ip=stun:
>>>>> stun.freeswitch.org"/>
>>>>>
>>>>>
>>>>> sip_profiles:
>>>>>
>>>>> sipinterface_1.xml
>>>>> <param name="apply-nat-acl" value="nat.auto"/>
>>>>> <param name="ext-sip-ip" value="$${external_sip_ip}"/>
>>>>> <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>
>>>>>
>>>>> Doug
>>>>>
>>>>>
>>>>> On Sat, Aug 16, 2014 at 7:26 AM, afshin afzali <a.afzali2003 at gmail.com
>>>>> > wrote:
>>>>>
>>>>>> Hi Miguel,
>>>>>>
>>>>>> I do not understand how the ACL (if you mean apply-nat-acl) can
>>>>>> effects on using public IP in SDP when I specified both ext-sip-ip and
>>>>>> ext-rtp-ip in sip profile!
>>>>>>  I changed the apply-nat-acl to a "always allow" and "rfc1918" but
>>>>>> does not make difference.
>>>>>>
>>>>>> Afshin
>>>>>>
>>>>>>
>>>>>> On Thu, Aug 14, 2014 at 3:18 PM, Miguel Oyarzo <
>>>>>> miguelaustro at gmail.com> wrote:
>>>>>>
>>>>>>>
>>>>>>> Wrong ACL?
>>>>>>>
>>>>>>>
>>>>>>> On Wed, Aug 13, 2014 at 10:06 PM, afshin afzali <
>>>>>>> a.afzali2003 at gmail.com> wrote:
>>>>>>>
>>>>>>>> Hi FreeSWITCHers:
>>>>>>>>
>>>>>>>> I configured a sip profile as bellow:
>>>>>>>>
>>>>>>>>
>>>>>>>> =================================================================================================
>>>>>>>> Name                    sipinterface_1
>>>>>>>> Domain Name             N/A
>>>>>>>> Auto-NAT                false
>>>>>>>> DBName                  sofia_reg_sipinterface_1
>>>>>>>> Pres Hosts
>>>>>>>> Dialplan                XML
>>>>>>>> Context                 context_1
>>>>>>>> Challenge Realm         auto_to
>>>>>>>> RTP-IP                  192.168.10.59
>>>>>>>> Ext-RTP-IP              X.Y.Z.W
>>>>>>>> SIP-IP                  192.168.10.59
>>>>>>>> Ext-SIP-IP               X.Y.Z.W
>>>>>>>> URL                     sip:mod_sofia at X.Y.Z.W:5060
>>>>>>>> BIND-URL                sip:mod_sofia at X.Y.Z.W
>>>>>>>> :5060;maddr=192.168.10.59;transport=udp,tcp
>>>>>>>> HOLD-MUSIC              N/A
>>>>>>>> OUTBOUND-PROXY          N/A
>>>>>>>> CODECS IN               G722,PCMU,PCMA,GSM
>>>>>>>> CODECS OUT              G722,PCMU,PCMA,GSM
>>>>>>>> TEL-EVENT               101
>>>>>>>> DTMF-MODE               rfc2833
>>>>>>>> CNG                     13
>>>>>>>> SESSION-TO              0
>>>>>>>> MAX-DIALOG              0
>>>>>>>> NOMEDIA                 false
>>>>>>>> LATE-NEG                false
>>>>>>>> PROXY-MEDIA             false
>>>>>>>> ZRTP-PASSTHRU           false
>>>>>>>> AGGRESSIVENAT           true
>>>>>>>> CALLS-IN                0
>>>>>>>> FAILED-CALLS-IN         0
>>>>>>>> CALLS-OUT               0
>>>>>>>> FAILED-CALLS-OUT        0
>>>>>>>> REGISTRATIONS           1
>>>>>>>>
>>>>>>>> for every INVITE that comes in via this profile, FS replys with
>>>>>>>> this SDP:
>>>>>>>>
>>>>>>>>    v=0
>>>>>>>>    o=FreeSWITCH 1407905843 1407905844 IN IP4 192.168.10.59
>>>>>>>>    s=FreeSWITCH
>>>>>>>>    c=IN IP4 192.168.10.59
>>>>>>>>    t=0 0
>>>>>>>>    m=audio 25142 RTP/AVP 0 101
>>>>>>>>    a=rtpmap:0 PCMU/8000
>>>>>>>>    a=rtpmap:101 telephone-event/8000
>>>>>>>>    a=fmtp:101 0-16
>>>>>>>>    a=ptime:20
>>>>>>>>
>>>>>>>> Although the Contact header of 200 OK is correct :
>>>>>>>> Contact: <sip:4000 at X.Y.Z.W:5060;transport=udp>
>>>>>>>>
>>>>>>>>
>>>>>>>> Appreciate all comments,
>>>>>>>> -- Afshin
>>>>>>>>
>>>>>>>>
>>>>>>>> _________________________________________________________________________
>>>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>>>> consulting at freeswitch.org
>>>>>>>> http://www.freeswitchsolutions.com
>>>>>>>>
>>>>>>>> 
>>>>>>>> 
>>>>>>>>
>>>>>>>> Official FreeSWITCH Sites
>>>>>>>> http://www.freeswitch.org
>>>>>>>> http://wiki.freeswitch.org
>>>>>>>> http://www.cluecon.com
>>>>>>>>
>>>>>>>> FreeSWITCH-users mailing list
>>>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>>>> UNSUBSCRIBE:
>>>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>>>> http://www.freeswitch.org
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> "Efficiency is doing things right; effectiveness is doing the right
>>>>>>> things (Peter Drucker)"
>>>>>>>
>>>>>>> Miguel Oyarzo
>>>>>>> DevOps & VoIP Engineer
>>>>>>> Linux User: # 483188 - counter.li.org
>>>>>>> http://au.linkedin.com/in/mikeaustralia
>>>>>>> Melbourne, Australia
>>>>>>>
>>>>>>>
>>>>>>> _________________________________________________________________________
>>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>>> consulting at freeswitch.org
>>>>>>> http://www.freeswitchsolutions.com
>>>>>>>
>>>>>>> 
>>>>>>> 
>>>>>>>
>>>>>>> Official FreeSWITCH Sites
>>>>>>> http://www.freeswitch.org
>>>>>>> http://wiki.freeswitch.org
>>>>>>> http://www.cluecon.com
>>>>>>>
>>>>>>> FreeSWITCH-users mailing list
>>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>>> UNSUBSCRIBE:
>>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>>> http://www.freeswitch.org
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org
>>>>>> http://www.freeswitchsolutions.com
>>>>>>
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org
>>>>>> http://confluence.freeswitch.org
>>>>>> http://www.cluecon.com
>>>>>>
>>>>>>
>>>>>> 
>>>>>> 
>>>>>>
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>> UNSUBSCRIBE:
>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>> http://www.freeswitch.org
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> 
>>>>> 
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>
>>>>
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> 
>>>> 
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>
>>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> 
> 
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>



-- 
"Efficiency is doing things right; effectiveness is doing the right things
(Peter Drucker)"

Miguel Oyarzo
DevOps & VoIP Engineer
Linux User: # 483188 - counter.li.org
http://au.linkedin.com/in/mikeaustralia
Melbourne, Australia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20140818/a24700f2/attachment-0001.html 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list