<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Anthony, In hopes of matching all IP's we added a very simple:<div><br></div><div><div> <list name="nat" default="allow"></div><div> </list></div><div><br></div><div>To the acl.conf.xml and we added:</div><div><br></div><div> <param name="apply_nat_acl" value="nat"/></div><div><br></div><div>To the sip profile. Unfortunately there was no affect. What would be the correct acl to match all IP's?</div><div><br></div><div>David</div><div><br></div><div><div>On Nov 4, 2008, at 1:18 PM, Anthony Minessale wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">keep in mind that the spec says when a contact addr has a new ip that you are supposed to<br>change the ip for all the rest of the messages to that new location. So we are doing what we are supposed to.<br><br>If you want to force the behavior you can use the nat hack to lock onto the first ip/port the dialog used.<br> <br>make an acl called ast in acl.conf.xml with the asterisk box ip in it <br><br>add apply_nat_acl=ast to the sip profile params.<br><br>Then when anything from that acl matches FS will use the nat hacks to lock on the address<br> it sends packets to.<br><br><br><br><div class="gmail_quote">On Tue, Nov 4, 2008 at 11:55 AM, David Aldworth <span dir="ltr"><<a href="mailto:daldworth@teliax.com">daldworth@teliax.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> It was in there when the server got brought up.<br> <br> Here is the full .xml settings:<br> <div><div></div><div class="Wj3C7c"><br> <settings><br> <param name="debug" value="0"/><br> <param name="sip-trace" value="no"/><br> <param name="rfc2833-pt" value="101"/><br> <param name="sip-port" value="5060"/><br> <param name="dialplan" value="XML"/><br> <param name="context" value="public"/><br> <param name="dtmf-duration" value="100"/><br> <param name="codec-prefs" value="$${outbound_codec_prefs}"/><br> <param name="hold-music" value="$${hold_music}"/><br> <param name="use-rtp-timer" value="true"/><br> <param name="rtp-timer-name" value="soft"/><br> <param name="multiple-registrations" value="true"/><br> <param name="manage-presence" value="true"/><br> <param name="aggressive-nat-detection" value="true"/><br> <param name="NDLB-force-rport" value="true"/><br> <param name="inbound-codec-negotiation" value="generous"/><br> <param name="nonce-ttl" value="60"/><br> <param name="auth-calls" value="true"/><br> <param name="rtp-timeout-sec" value="1800"/><br> <param name="rtp-ip" value="$${local_ip_v4}"/><br> <param name="sip-ip" value="$${local_ip_v4}"/><br> <param name="ext-rtp-ip" value="$${external_rtp_ip}"/><br> <param name="ext-sip-ip" value="$${external_sip_ip}"/><br> <param name="rtp-timeout-sec" value="300"/><br> <param name="rtp-hold-timeout-sec" value="1800"/><br> </settings><br> <br> <br> </div></div><div><div></div><div class="Wj3C7c">On Nov 4, 2008, at 10:52 AM, Brian West wrote:<br> <br> > Make sure you restart the profile for it to take effect.<br> ><br> > /b<br> ><br> > On Nov 4, 2008, at 11:49 AM, David Aldworth wrote:<br> ><br> >> That is actually already on.<br> >><br> >> Any idea?<br> ><br> ><br> > _______________________________________________<br> > Freeswitch-users mailing list<br> > <a href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a><br> > <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br> > UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br> > <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br> <br> <br> _______________________________________________<br> Freeswitch-users mailing list<br> <a href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a><br> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br> </div></div></blockquote></div><br><br clear="all"><br>-- <br>Anthony Minessale II<br><br>FreeSWITCH <a href="http://www.freeswitch.org/">http://www.freeswitch.org/</a><br>ClueCon <a href="http://www.cluecon.com/">http://www.cluecon.com/</a><br> <br>AIM: anthm<br><a href="mailto:MSN%3Aanthony_minessale@hotmail.com">MSN:anthony_minessale@hotmail.com</a><br>GTALK/JABBER/<a href="mailto:PAYPAL%3Aanthony.minessale@gmail.com">PAYPAL:anthony.minessale@gmail.com</a><br> IRC: <a href="http://irc.freenode.net">irc.freenode.net</a> #freeswitch<br><br>FreeSWITCH Developer Conference<br><a href="mailto:sip%3A888@conference.freeswitch.org">sip:888@conference.freeswitch.org</a><br><a href="http://iax:guest@conference.freeswitch.org/888">iax:guest@conference.freeswitch.org/888</a><br> <a href="mailto:googletalk%3Aconf%2B888@conference.freeswitch.org">googletalk:conf+888@conference.freeswitch.org</a><br>pstn:213-799-1400<br> _______________________________________________<br>Freeswitch-users mailing list<br><a href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a><br>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br>http://www.freeswitch.org<br></blockquote></div><br></div></body></html>