<div>I played with the ACLs but it didn't have any effect on the contact header. So I went into the code and after some investigation I stepped on the <b>sip-force-contact</b> variable. When this guy is set to <b>NDLB-connectile-dysfunction</b>, freeswitch overwrites the contact header with the IP/PORT it received the IP packet on, regardless of the actual nat state.</div>
<div><br></div><div>Hynek</div><br>
<br><br><div class="gmail_quote">On Wed, Nov 2, 2011 at 6:42 PM, Hynek Cihlar <span dir="ltr"><<a href="mailto:hynek.cihlar@gmail.com">hynek.cihlar@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div>Brad, Brian, thanks for your replies</div><div><br></div><div>Actually, the switch is not used in the standard setup, where the external profile is used as a gateway and the internal (default) profile for directly connected sip clients.</div>
<div><br></div><div>In my case, the switch has two profiles. The so called external is connected to another switch, just passing calls. The connection is routed. The second profile (internal) which is giving me troubles, is used for registering SIP clients. The SIP clients are usually behind their own NAT routers.</div>
<div><br></div><div>SIP-IP and EXT-SIP-IP are both the same public IP, since the router is publicly visible on the internal profile. On the external profile, they are assigned to a private internal IP. The switch is sitting on two subnets.</div>
<div><br></div><div>Now, the local-network-acl is set to localnet.auto on both profiles. I was assuming ACLs are used solely for security!</div><br clear="all"><font color="#888888">Hynek<br><br>
<br><br></font><div class="gmail_quote"><div><div></div><div class="h5">On Wed, Nov 2, 2011 at 6:16 PM, Brian West <span dir="ltr"><<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div></div><div class="h5">
<div style="word-wrap:break-word">You also have to put in local-network-acl so it knows when to lie and when not to lie in the contact.<div><br></div><font color="#888888"><div>/b</div></font><div><div><br><div>
<div>On Nov 2, 2011, at 11:54 AM, Brad Mina wrote:</div><br><blockquote type="cite"><span style="border-collapse:separate;font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium">RTP-IP 178.238.X.Y<br>
Ext-RTP-IP 178.238.X.Y<br>SIP-IP 178.238.X.Y<br>Ext-SIP-IP 178.238.X.Y<br><br>Let's take a look at what 'ext' might be! Keep in mind you'll need to<br>change it on your external profile as well.</span></blockquote>
</div><br></div></div></div><br><br></div></div><div class="im">
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></div></blockquote></div><br>
</blockquote></div><br>