<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div>The clients are on the 192. Network.</div><div>The network internal to freeswitch is 17. </div><div>Docker assigns the 17. Ips to the container (which fs is running on).</div><div><br></div><div>The signalling is fine, but the sdp needs to show the 192.168.1.168 address as its currently showing the internal network (even though ext-rtp-Ip is set and confirmed). </div><div><br></div><div>192.168.1.168 is a bridged network interface. </div><div><br></div><div>192.168.1.something -> 192.168.1.168 (docker vm)->172.17.0.5(docker container)</div><div><br></div><div>The docker container has the rtp ports "exposed" (in the same way as it does for the signalling port).</div><div><br></div><div>I actually didn't like docker when I first looked at it, but it actually quite nice for development (bar this issue)</div><div>Thanks</div><div>Oz</div><div><br>On 6 Apr 2016, at 19:00, Michael Jerris <<a href="mailto:mike@jerris.com">mike@jerris.com</a>> wrote:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html charset=utf-8">And your clients are attaching from what network? Also if your description is correct, then you have internal and external addresses backwards. Does it actually nat those addresses or is it routed?<div class=""><br class=""><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Apr 6, 2016, at 1:49 PM, Oz Mortimer <<a href="mailto:omortimer@gmail.com" class="">omortimer@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="content-type" content="text/html; charset=utf-8" class=""><div dir="auto" class=""><div class=""></div><div class="">I know! I've never come across it! It's what I seem to have to do when using a docker container - unless someone knows different?</div><div class="">Docker uses a vm, which is on the network 192.168.. But the container has an IP of 172.17..</div><div class="">I'm no docker expert and in an ideal world the container should have a 192.168.. Address, but I can't find a way to make that happen.</div><div class="">Maybe I'm asking in the wrong mailing list - could be a question for docker. Either way, I'd like to figure out what I'm doing wrong! </div><div class="">Nb. This is no way going to be a production setup - it's a development setup.</div><div class=""><br class=""></div><div class="">I "think" I understand what I need to do..</div><div class="">Thanks</div><div class="">Oz</div><div class="">On 6 Apr 2016, at 18:39, Michael Jerris <<a href="mailto:mike@jerris.com" class="">mike@jerris.com</a>> wrote:<br class=""><br class=""></div><blockquote type="cite" class=""><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class="">The default acl's treat all rfc1918 addresses as internal. you'll need to make one that treats your external addresses as external even tho they are rfc1918. Why are you natting from one private address to another? Its a very strange implementation<div class=""><br class=""><div class=""><br class=""><div class=""><blockquote type="cite" class=""><div class="">On Apr 6, 2016, at 1:31 PM, Oz Mortimer <<a href="mailto:omortimer@gmail.com" class="">omortimer@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class="">Thanks for the reply - I wish I understood it - but I don’t ;)</div><div class="">Yes, the natting is between one rfc1918 address space to another.</div><div class=""><br class=""></div><div class="">Based on your reply I tried</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre">        </span><param name="apply-nat-acl" value="damnnat”/></div><div class=""><br class=""></div><div class="">where acl.conf.xml has</div><div class=""><br class=""></div><div class=""><div class=""> <list name="damnnat" default="allow"></div><div class=""> <node type="allow" cidr="192.168.1.0/24"/></div><div class=""> <node type="allow" cidr="172.17.0.0/24"/></div><div class=""> </list></div><div class=""><br class=""></div><div class="">To no avail!. can you give me a pointer to what I need to change and where?</div><div class=""><br class=""></div><div class="">Thanks</div><div class="">Oz.</div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><div class="">On 6 Apr 2016, at 17:58, Michael Jerris <<a href="mailto:mike@jerris.com" class="">mike@jerris.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">you are natting from one rfc1918 address space to another? If so, all the default nat acl's will be wrong, and you will have to make your own acl's that match your network environment.<div class=""><br class=""><div class=""><blockquote type="cite" class=""><div class="">On Apr 6, 2016, at 12:48 PM, Oz Mortimer <<a href="mailto:omortimer@gmail.com" class="">omortimer@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">HI,<div class=""><br class=""></div><div class="">I’m trying to get FS running in Docker, which largely was pain free (i know, i know, VMs, etc), but I can’t get my head around what is going on with RTP. Ive set ext-rtp-ip and it seems to be taking affect:</div><div class=""><br class=""></div><div class=""><div class="">freeswitch@7ad22635059e> sofia status profile internal</div><div class="">=================================================================================================</div><div class="">Name <span class="Apple-tab-span" style="white-space:pre">        </span>internal</div><div class="">Domain Name <span class="Apple-tab-span" style="white-space:pre">        </span>N/A</div><div class="">Auto-NAT <span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">DBName <span class="Apple-tab-span" style="white-space:pre">        </span>sofia_reg_internal</div><div class="">Pres Hosts <span class="Apple-tab-span" style="white-space:pre">        </span>172.17.0.5,172.17.0.5</div><div class="">Dialplan <span class="Apple-tab-span" style="white-space:pre">        </span>XML</div><div class="">Context <span class="Apple-tab-span" style="white-space:pre">        </span>trusted</div><div class="">Challenge Realm <span class="Apple-tab-span" style="white-space:pre">        </span>auto_from</div><div class="">RTP-IP <span class="Apple-tab-span" style="white-space:pre">        </span>172.17.0.5</div><div class="">Ext-RTP-IP <span class="Apple-tab-span" style="white-space:pre">        </span><font color="#e32400" class="">192.168.1.168</font></div><div class="">SIP-IP <span class="Apple-tab-span" style="white-space:pre">        </span>172.17.0.5</div><div class="">Ext-SIP-IP <span class="Apple-tab-span" style="white-space:pre">        </span><font color="#e32400" class="">192.168.1.168</font></div><div class="">URL <span class="Apple-tab-span" style="white-space:pre">        </span><a href="sip:mod_sofia@192.168.1.168:5060" class="">sip:mod_sofia@192.168.1.168:5060</a></div><div class="">BIND-URL <span class="Apple-tab-span" style="white-space:pre">        </span><a href="sip:mod_sofia@192.168.1.168:5060;maddr=" class="">sip:mod_sofia@192.168.1.168:5060;maddr=</a><font color="#4f7a28" class="">172.17.0.5</font>;transport=udp,tcp</div><div class="">HOLD-MUSIC <span class="Apple-tab-span" style="white-space:pre">        </span>local_stream://moh</div><div class="">OUTBOUND-PROXY <span class="Apple-tab-span" style="white-space:pre">        </span>N/A</div><div class="">CODECS IN <span class="Apple-tab-span" style="white-space:pre">        </span>G729,PCMU,PCMA</div><div class="">CODECS OUT <span class="Apple-tab-span" style="white-space:pre">        </span>G729,PCMU,PCMA</div><div class="">TEL-EVENT <span class="Apple-tab-span" style="white-space:pre">        </span>101</div><div class="">DTMF-MODE <span class="Apple-tab-span" style="white-space:pre">        </span>none</div><div class="">CNG <span class="Apple-tab-span" style="white-space:pre">        </span>13</div><div class="">SESSION-TO <span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">MAX-DIALOG <span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">NOMEDIA <span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">LATE-NEG <span class="Apple-tab-span" style="white-space:pre">        </span>true</div><div class="">PROXY-MEDIA <span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">ZRTP-PASSTHRU <span class="Apple-tab-span" style="white-space:pre">        </span>true</div><div class="">AGGRESSIVENAT <span class="Apple-tab-span" style="white-space:pre">        </span>false</div><div class="">CALLS-IN <span class="Apple-tab-span" style="white-space:pre">        </span>2</div><div class="">FAILED-CALLS-IN <span class="Apple-tab-span" style="white-space:pre">        </span>2</div><div class="">CALLS-OUT <span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">FAILED-CALLS-OUT <span class="Apple-tab-span" style="white-space:pre">        </span>0</div><div class="">REGISTRATIONS <span class="Apple-tab-span" style="white-space:pre">        </span>0</div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">but when a call is placed i seems to be incorrect in the SDP</div><div class=""><br class=""></div><div class=""><div class="">2016-04-06 16:29:49.011107 [DEBUG] mod_sofia.c:2353 Ring SDP:</div><div class="">v=0</div><div class="">o=FreeSWITCH 1459942605 1459942606 IN IP4 <font color="#e32400" class="">172.17.0.5</font></div><div class="">s=FreeSWITCH</div><div class="">c=IN IP4 <font color="#e32400" class="">172.17.0.5</font></div><div class="">t=0 0</div><div class="">m=audio 17584 RTP/AVP 8 101</div><div class="">a=rtpmap:8 PCMA/8000</div><div class="">a=rtpmap:101 telephone-event/8000</div><div class="">a=fmtp:101 0-16</div><div class="">a=ptime:20</div><div class="">a=sendrecv</div></div><div class=""><br class=""></div><div class="">Shouldn’t the SDP reflect the Ext-RTP-IP ?</div><div class=""><br class=""></div><div class="">Im sure i’ve missed some sort of config setting or have gone snow blind!.</div><div class="">fs version is FreeSWITCH (Version 1.6.7 -14-d38d065 64bit)</div><div class=""><br class=""></div><div class="">Any ideas will be greatly received.</div><div class="">Thanks</div><div class="">Oz.</div></div>_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services: <br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class=""><a href="http://www.freeswitchsolutions.com/" class="">http://www.freeswitchsolutions.com</a><br class=""><br class="">Official FreeSWITCH Sites<br class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a><br class=""><a href="http://confluence.freeswitch.org/" class="">http://confluence.freeswitch.org</a><br class=""><a href="http://www.cluecon.com/" class="">http://www.cluecon.com</a><br class=""><br class="">FreeSWITCH-users mailing list<br class=""><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="">FreeSWITCH-users@lists.freeswitch.org</a><br class=""><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="">UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" class="">lists.freeswitch.org/mailman/options/freeswitch-users</a><br class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a></div></blockquote></div><br class=""></div></div>_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services: <br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class=""><a href="http://www.freeswitchsolutions.com/" class="">http://www.freeswitchsolutions.com</a><br class=""><br class="">Official FreeSWITCH Sites<br class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a><br class=""><a href="http://confluence.freeswitch.org/" class="">http://confluence.freeswitch.org</a><br class=""><a href="http://www.cluecon.com/" class="">http://www.cluecon.com</a><br class=""><br class="">FreeSWITCH-users mailing list<br class=""><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="">FreeSWITCH-users@lists.freeswitch.org</a><br class=""><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="">UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" class="">lists.freeswitch.org/mailman/options/freeswitch-users</a><br class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a></div></blockquote></div><br class=""></div></div>_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services: <br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class=""><a href="http://www.freeswitchsolutions.com/" class="">http://www.freeswitchsolutions.com</a><br class=""><br class="">Official FreeSWITCH Sites<br class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a><br class=""><a href="http://confluence.freeswitch.org/" class="">http://confluence.freeswitch.org</a><br class=""><a href="http://www.cluecon.com/" class="">http://www.cluecon.com</a><br class=""><br class="">FreeSWITCH-users mailing list<br class=""><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="">FreeSWITCH-users@lists.freeswitch.org</a><br class=""><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="">UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" class="">lists.freeswitch.org/mailman/options/freeswitch-users</a><br class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a></div></blockquote></div><br class=""></div></div></div></blockquote><blockquote type="cite" class=""><div class=""><span class="">_________________________________________________________________________</span><br class=""><span class="">Professional FreeSWITCH Consulting Services: </span><br class=""><span class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a></span><br class=""><span class=""><a href="http://www.freeswitchsolutions.com/" class="">http://www.freeswitchsolutions.com</a></span><br class=""><span class=""></span><br class=""><span class="">Official FreeSWITCH Sites</span><br class=""><span class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a></span><br class=""><span class=""><a href="http://confluence.freeswitch.org/" class="">http://confluence.freeswitch.org</a></span><br class=""><span class=""><a href="http://www.cluecon.com/" class="">http://www.cluecon.com</a></span><br class=""><span class=""></span><br class=""><span class="">FreeSWITCH-users mailing list</span><br class=""><span class=""><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="">FreeSWITCH-users@lists.freeswitch.org</a></span><br class=""><span class=""><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br class=""><span class="">UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" class="">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br class=""><span class=""><a href="http://www.freeswitch.org/" class="">http://www.freeswitch.org</a></span></div></blockquote></div>_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services: <br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class=""><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><br class=""><br class="">Official FreeSWITCH Sites<br class=""><a href="http://www.freeswitch.org">http://www.freeswitch.org</a><br class=""><a href="http://confluence.freeswitch.org">http://confluence.freeswitch.org</a><br class=""><a href="http://www.cluecon.com">http://www.cluecon.com</a><br class=""><br class="">FreeSWITCH-users mailing list<br class=""><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br class=""><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="">UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a><br class=""><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></div></blockquote></div><br class=""></div></div></div></blockquote><blockquote type="cite"><div><span>_________________________________________________________________________</span><br><span>Professional FreeSWITCH Consulting Services: </span><br><span><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a></span><br><span><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a></span><br><span></span><br><span>Official FreeSWITCH Sites</span><br><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br><span><a href="http://confluence.freeswitch.org">http://confluence.freeswitch.org</a></span><br><span><a href="http://www.cluecon.com">http://www.cluecon.com</a></span><br><span></span><br><span>FreeSWITCH-users mailing list</span><br><span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a></span><br><span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br><span>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span></div></blockquote></body></html>