Is your freeswitch also behind it's own firewall? If not then you probably want to use the external.xml file as the basis for your public-facing SIP ports. Some folks have simply renamed external.xml to internal.xml and vice-versa.<br>
-MC<br><br><div class="gmail_quote">On Fri, Jul 1, 2011 at 12:37 PM, Dave Horton <span dir="ltr"><<a href="mailto:dave@dchorton.com">dave@dchorton.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<br>
I have a phone behind a firewall registering with the internal profile. The address in the Via header is not reachable, and the FS (correctly, IMO) sends the response back to the actual sending IP address. However, rather than sending it to the actual sending udp port, it incorrectly (again, IMO) sends it to the port advertised in the Via header. Of course the message does not get through the firewall, and the phone keeps retransmitting the REGISTER.<br>
<br>
Is this a bug, or am I missing something? And is there a setting where I can force the behavior that I want (which is: send responses to the sending address:port if the sending address:port is different than the Via header).<br>
<br>
Trace below..<br>
<br>
<br>
recv 481 bytes from udp/[66.37.97.53]:1024 at 19:28:12.445081:<br>
------------------------------------------------------------------------<br>
REGISTER sip:65.162.239.204 SIP/2.0<br>
Via: SIP/2.0/UDP 10.93.14.119:5064;branch=z9hG4bK-e73de4bf<br>
From: "1002" <<a href="mailto:sip%3A1002@65.162.239.204">sip:1002@65.162.239.204</a>>;tag=7718f2af7f3dcc73o2<br>
To: "1002" <<a href="mailto:sip%3A1002@65.162.239.204">sip:1002@65.162.239.204</a>><br>
Call-ID: <a href="mailto:930c7e31-648ae3db@10.93.14.119">930c7e31-648ae3db@10.93.14.119</a><br>
CSeq: 53622 REGISTER<br>
Max-Forwards: 70<br>
Contact: "1002" <<a href="http://sip:1002@10.93.14.119:5064" target="_blank">sip:1002@10.93.14.119:5064</a>>;expires=3600<br>
User-Agent: Linksys/SPA962-5.2.8(SC)<br>
Content-Length: 0<br>
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER<br>
Supported: replaces<br>
<br>
------------------------------------------------------------------------<br>
send 671 bytes to udp/[66.37.97.53]:5064 at 19:28:12.445259:<br>
------------------------------------------------------------------------<br>
SIP/2.0 401 Unauthorized<br>
Via: SIP/2.0/UDP 10.93.14.119:5064;branch=z9hG4bK-e73de4bf;received=66.37.97.53<br>
From: "1002" <<a href="mailto:sip%3A1002@65.162.239.204">sip:1002@65.162.239.204</a>>;tag=7718f2af7f3dcc73o2<br>
To: "1002" <<a href="mailto:sip%3A1002@65.162.239.204">sip:1002@65.162.239.204</a>>;tag=t1m9emDKB4trF<br>
Call-ID: <a href="mailto:930c7e31-648ae3db@10.93.14.119">930c7e31-648ae3db@10.93.14.119</a><br>
CSeq: 53622 REGISTER<br>
User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-25c725c 2011-06-30 18-30-24 -0500<br>
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE<br>
Supported: timer, precondition, path, replaces<br>
WWW-Authenticate: Digest realm="65.162.239.204", nonce="7e426985-2f7a-40ff-a817-6c167207853f", algorithm=MD5, qop="auth"<br>
Content-Length: 0<br>
<br>
<br>
<br>
_______________________________________________<br>
Join us at ClueCon 2011, Aug 9-11, Chicago<br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a> 877-7-4ACLUE<br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br>