<div dir="ltr"><div>Is there NAT anywhere between the sip endpoints?</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Sep 21, 2015 at 11:49 AM, Mi Ke <span dir="ltr"><<a href="mailto:mi.ke@null.net" target="_blank">mi.ke@null.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:Verdana;font-size:12.0px"><div>Hi All,</div>
<div> </div>
<div>I want to register my FS machine (FreeSWITCH Version 1.6.0 - git 6762f14 2015-09-03 20:36:52Z 64bit - CentOS 6.7, selinux is disabled for debugging) as endpoint at another target SIP server (1.1.1.1). This is my gateways section:</div>
<div> </div>
<div>
<div> <gateway name="1111"><br>
<param name="register" value="true"/><br>
<param name="register-transport" value="udp"/><br>
<param name="username" value="1111"/><br>
<param name="realm" value="1.1.1.1"/><br>
<param name="password" value='my_strong_pass"/><br>
<param name="proxy" value="1.1.1.1"/><br>
<param name="expire-seconds" value="90"/><br>
</gateway></div>
<div> </div>
<div>The problem is - a target server at 1.1.1.1 receives absolutely no packets from my FS machine and I'm getting constant registration timeouts:</div>
<div> </div>
<div>
<div>2015-09-21 15:01:46.764466 [ERR] sofia_reg.c:2101 487020870 Registration Failed with status Request Timeout [408]. failure #1<br>
2015-09-21 15:01:46.864501 [WARNING] sofia_reg.c:469 487020870 Failed Registration [408], setting retry to 30 seconds.</div>
</div>
<div> </div>
<div>Meanwhile, when I do UDP scan of port 5060 on 1.1.1.1 from FS machine, I see that port is opened:</div>
<div> </div>
<div>
<div>[root@srv]# nmap -sU -Pn -p U:5060 1.1.1.1</div>
<div>Starting Nmap 5.51 ( <a href="http://nmap.org" target="_blank">http://nmap.org</a> ) at 2015-09-21 15:28 EEST<br>
Nmap scan report for 1.1.1.1<br>
Host is up.<br>
PORT STATE SERVICE<br>
5060/udp open|filtered sip</div>
<div>Nmap done: 1 IP address (1 host up) scanned in 2.28 seconds<br>
[root@srv]#</div>
<div> </div>
<div>When I filter out port 5060 on target machine 1.1.1.1 I see appropriate lines in the log showing filtered requests:</div>
<div> </div>
<div>
<div>Sep 21 10:39:57 sip kernel: DROP IN=eth0 OUT= MAC=00:16:3c SRC=2.2.2.2 DST=1.1.1.1 LEN=28 TOS=0x00 PREC=0x00 TTL=52 ID=10616 PROTO=UDP SPT=47229 DPT=5060 LEN=8<br>
Sep 21 10:39:58 sip kernel: DROP IN=eth0 OUT= MAC=00:16:3c: SRC=2.2.2.2 DST=1.1.1.1 LEN=28 TOS=0x00 PREC=0x00 TTL=47 ID=23653 PROTO=UDP SPT=47230 DPT=5060 LEN=8</div>
<div> </div>
<div>Firewalls on both machines are off for debugging:</div>
<div> </div>
<div>
<div>[root@srv]# iptables -L -n<br>
Chain INPUT (policy ACCEPT)<br>
target prot opt source destination</div>
<div>Chain FORWARD (policy ACCEPT)<br>
target prot opt source destination</div>
<div>Chain OUTPUT (policy ACCEPT)<br>
target prot opt source destination<br>
[root@srv]#</div>
</div>
<div> </div>
<div>I've spent many hours while investigating that quest but still have no ideas on what's happening. I'll highly appreciate if someone can point on where else I can look to resolve my issue.</div>
<div> </div>
<div>Thanks in advance</div>
<div> </div>
<div>Mike</div>
</div>
</div>
<div> </div>
<div> </div>
</div></div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>