<p dir="ltr">Probably is happened because nginx located on same wth FreeSwith and issue related to loopbak interface.<br>
I use nginx on separate vitrual machine and WebRTS clents is made call correctly. <br>
Or bind nginx on external ip address.</p>
<br><div class="gmail_quote"><div dir="ltr">On Tue, Nov 3, 2015, 00:57 Dan Edwards <<a href="mailto:DEdwards@vertical.com">DEdwards@vertical.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt">Thank you for your response, Michael.
<div><br>
</div>
<div>Pardon my ignorance on ACL's, but I'm unclear how that works in this scenario. When I read the Confluence page regarding ACL's, I read their application to be allowing access to the system. <span style="font-size:10pt">In my case, I'm trying to convince
FS to offer up the external IP, regardless of what the actual IP address is.</span></div>
<div><br>
</div>
<div>Is there more doc than <a href="https://freeswitch.org/confluence/display/FREESWITCH/ACL" target="_blank">https://freeswitch.org/confluence/display/FREESWITCH/ACL</a><a href="https://freeswitch.org/confluence/display/FREESWITCH/ACL" style="font-size:10pt" target="_blank">https://freeswitch.org/confluence/display/FREESWITCH/ACL</a> that
I can refer to? </div>
<div><br>
</div>
<div>Again, thank you for your help and sorry if these are dumb questions.</div>
<div><br>
</div>
<div>Dan</div>
<div><br>
</div>
<div><br>
<div style="font-family:Times New Roman;color:#000000;font-size:16px">
<hr>
<div style="direction:ltr"><font face="Tahoma" size="2" color="#000000"><b>From:</b> <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a> [<a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a>] on behalf of Michael Jerris [<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>]<br>
<b>Sent:</b> Monday, November 02, 2015 4:36 PM<br>
<b>To:</b> FreeSWITCH Users Help<br>
<b>Subject:</b> Re: [Freeswitch-users] FreeSWITCH behind an Nginx proxy<br>
</font><br>
</div></div></div></div></div><div><div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt"><div><div style="font-family:Times New Roman;color:#000000;font-size:16px">
<div></div>
<div>there are acls for this yes. check out the ones that refer to nat<span></span><br>
<br>
On Monday, November 2, 2015, Dan Edwards <<a href="mailto:DEdwards@vertical.com" target="_blank">DEdwards@vertical.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt">
<div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt">We're trying to build a system that allows WebSocket SIP traffic through an Nginx proxy to FreeSWITCH and I'm having trouble getting the proper IP address offered in the SDP.
<div><br>
</div>
<div>I added ext-rtp-ip and ext-sip-ip to the profile, but if I come in via the Nginx proxy, FS always offers the local address. I made some code changes to FS to catch the X-Forwarded-For header on the initial WebSocket connect, thinking I could substitute
the forwarded-for IP address for the Nginx address, but this did not correct the problem.</div>
<div><br>
</div>
<div>To be clear, if I run Nginx on 172.1.1.1 and FS on 172.1.1.2, when I come in via Nginx, FS sees the SIP IP as 172.1.1.1 and offers 172.1.1.2 as the RTP address. If I come in via a port-forward, FS offers what I have in 'ext-rtp-ip' as the IP address.</div>
<div><br>
</div>
<div>Is there a way to force FS to always offer ext-rtp-ip, even if the address is local or does this require a code change? If it requires a code change, where does this logic exist?</div>
<div><br>
</div>
<div>Thank you,</div>
<div>Dan</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div></div></div></div>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a></blockquote></div>