<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">The default acl's treat all rfc1918 addresses as internal. &nbsp;you'll need to make one that treats your external addresses as external even tho they are rfc1918. &nbsp;Why are you natting from one private address to another? &nbsp;Its a very strange implementation<div class=""><br class=""><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Apr 6, 2016, at 1:31 PM, Oz Mortimer &lt;<a href="mailto:omortimer@gmail.com" class="">omortimer@gmail.com</a>&gt; wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class="">Thanks for the reply - I wish I understood it - but I don’t ;)</div><div class="">Yes, the natting is between one rfc1918 address space to another.</div><div class=""><br class=""></div><div class="">Based on your reply I tried</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre">        </span>&lt;param name="apply-nat-acl" value="damnnat”/&gt;</div><div class=""><br class=""></div><div class="">where acl.conf.xml has</div><div class=""><br class=""></div><div class=""><div class="">&nbsp;&lt;list name="damnnat" default="allow"&gt;</div><div class="">&nbsp; &nbsp; &nbsp; &lt;node type="allow" cidr="192.168.1.0/24"/&gt;</div><div class="">&nbsp; &nbsp; &nbsp; &lt;node type="allow" cidr="172.17.0.0/24"/&gt;</div><div class="">&nbsp; &nbsp; &lt;/list&gt;</div><div class=""><br class=""></div><div class="">To no avail!. can you give me a pointer to what I need to change and where?</div><div class=""><br class=""></div><div class="">Thanks</div><div class="">Oz.</div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><div class="">On 6 Apr 2016, at 17:58, Michael Jerris &lt;<a href="mailto:mike@jerris.com" class="">mike@jerris.com</a>&gt; wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">you are natting from one rfc1918 address space to another? &nbsp;If so, all the default nat acl's will be wrong, and you will have to make your own acl's that match your network environment.<div class=""><br class=""><div class=""><blockquote type="cite" class=""><div class="">On Apr 6, 2016, at 12:48 PM, Oz Mortimer &lt;<a href="mailto:omortimer@gmail.com" class="">omortimer@gmail.com</a>&gt; wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">HI,<div class=""><br class=""></div><div class="">I’m trying to get FS running in Docker, which largely was pain free (i know, i know, VMs, etc), but I can’t get my head around what is going on with RTP. Ive set ext-rtp-ip and it seems to be taking affect:</div><div class=""><br class=""></div><div class=""><div class="">freeswitch@7ad22635059e&gt; sofia status profile internal</div><div class="">=================================================================================================</div><div class="">Name &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>internal</div><div class="">Domain Name &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>N/A</div><div class="">Auto-NAT &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">DBName &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>sofia_reg_internal</div><div class="">Pres Hosts &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>172.17.0.5,172.17.0.5</div><div class="">Dialplan &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>XML</div><div class="">Context &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>trusted</div><div class="">Challenge Realm &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>auto_from</div><div class="">RTP-IP &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>172.17.0.5</div><div class="">Ext-RTP-IP &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span><font color="#e32400" class="">192.168.1.168</font></div><div class="">SIP-IP &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>172.17.0.5</div><div class="">Ext-SIP-IP &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span><font color="#e32400" class="">192.168.1.168</font></div><div class="">URL &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span><a href="sip:mod_sofia@192.168.1.168:5060" class="">sip:mod_sofia@192.168.1.168:5060</a></div><div class="">BIND-URL &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span><a href="sip:mod_sofia@192.168.1.168:5060;maddr=" class="">sip:mod_sofia@192.168.1.168:5060;maddr=</a><font color="#4f7a28" class="">172.17.0.5</font>;transport=udp,tcp</div><div class="">HOLD-MUSIC &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>local_stream://moh</div><div class="">OUTBOUND-PROXY &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>N/A</div><div class="">CODECS IN &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>G729,PCMU,PCMA</div><div class="">CODECS OUT &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>G729,PCMU,PCMA</div><div class="">TEL-EVENT &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>101</div><div class="">DTMF-MODE &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>none</div><div class="">CNG &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>13</div><div class="">SESSION-TO &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">MAX-DIALOG &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">NOMEDIA &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">LATE-NEG &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>true</div><div class="">PROXY-MEDIA &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">ZRTP-PASSTHRU &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>true</div><div class="">AGGRESSIVENAT &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">CALLS-IN &nbsp; &nbsp; &nbsp; &nbsp; <span class="Apple-tab-span" style="white-space:pre">        </span>2</div><div class="">FAILED-CALLS-IN &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>2</div><div class="">CALLS-OUT &nbsp; &nbsp; &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">FAILED-CALLS-OUT <span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">REGISTRATIONS &nbsp; &nbsp;<span class="Apple-tab-span" style="white-space:pre">        </span>0</div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">but when a call is placed i seems to be incorrect in the SDP</div><div class=""><br class=""></div><div class=""><div class="">2016-04-06 16:29:49.011107 [DEBUG] mod_sofia.c:2353 Ring SDP:</div><div class="">v=0</div><div class="">o=FreeSWITCH 1459942605 1459942606 IN IP4 <font color="#e32400" class="">172.17.0.5</font></div><div class="">s=FreeSWITCH</div><div class="">c=IN IP4 <font color="#e32400" class="">172.17.0.5</font></div><div class="">t=0 0</div><div class="">m=audio 17584 RTP/AVP 8 101</div><div class="">a=rtpmap:8 PCMA/8000</div><div class="">a=rtpmap:101 telephone-event/8000</div><div class="">a=fmtp:101 0-16</div><div class="">a=ptime:20</div><div class="">a=sendrecv</div></div><div class=""><br class=""></div><div class="">Shouldn’t the SDP reflect the Ext-RTP-IP ?</div><div class=""><br class=""></div><div class="">Im sure i’ve missed some sort of config setting or have gone snow blind!.</div><div class="">fs version is&nbsp;FreeSWITCH (Version 1.6.7 -14-d38d065 64bit)</div><div class=""><br class=""></div><div class="">Any ideas will be greatly received.</div><div class="">Thanks</div><div class="">Oz.</div></div>_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services: <br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class=""><a href="http://www.freeswitchsolutions.com/" class="">http://www.freeswitchsolutions.com</a><br class=""><br class="">Official FreeSWITCH Sites<br class=""><a href="http://www.freeswitch.org" class="">http://www.freeswitch.org</a><br class="">http://confluence.freeswitch.org<br class="">http://www.cluecon.com<br class=""><br class="">FreeSWITCH-users mailing list<br class="">FreeSWITCH-users@lists.freeswitch.org<br class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br class="">UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br class="">http://www.freeswitch.org</div></blockquote></div><br class=""></div></div>_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services: <br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class=""><a href="http://www.freeswitchsolutions.com" class="">http://www.freeswitchsolutions.com</a><br class=""><br class="">Official FreeSWITCH Sites<br class="">http://www.freeswitch.org<br class="">http://confluence.freeswitch.org<br class="">http://www.cluecon.com<br class=""><br class="">FreeSWITCH-users mailing list<br class="">FreeSWITCH-users@lists.freeswitch.org<br class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br class="">UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br class="">http://www.freeswitch.org</div></blockquote></div><br class=""></div></div>_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services: <br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class="">http://www.freeswitchsolutions.com<br class=""><br class="">Official FreeSWITCH Sites<br class="">http://www.freeswitch.org<br class="">http://confluence.freeswitch.org<br class="">http://www.cluecon.com<br class=""><br class="">FreeSWITCH-users mailing list<br class="">FreeSWITCH-users@lists.freeswitch.org<br class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br class="">UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br class="">http://www.freeswitch.org</div></blockquote></div><br class=""></div></div></body></html>