<div dir="ltr">you have to fix your local-network-acl in each system probably to do the right thing, do you have the ext-rtp-ip set with the automat: prefix?</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Oct 7, 2016 at 1:23 PM, Serge S. Yuriev <span dir="ltr">&lt;<a href="mailto:me@nevian.org" target="_blank">me@nevian.org</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
Two SIP profiles:<br>
External 83.хх<br>
Internal <a href="http://10.23.154.0/24" rel="noreferrer" target="_blank">10.23.154.0/24</a><br>
<br>
Via external we are receiving/send calls from/to <a href="http://172.17.2.0/29" rel="noreferrer" target="_blank">172.17.2.0/29</a><br>
For some reason if we call outside FS sends unmodified addresses in SDP.<br>
So we have unroutable address in SDP and one-way audio. If call flows<br>
ext to int all working correct.<br>
Tried local-network-acl on inside (10.хх) with excluded 172.хх,<br>
apply-nat-acl with included 172.xx on either int and ext. Nothing helps :(<br>
<br>
&quot;Bad one&quot; SDP - from internal to external<br>
send 960 bytes to udp/[10.23.154.63]:6060 at 18:16:22.226984:<br>
    ------------------------------<wbr>------------------------------<wbr>------------<br>
    SIP/2.0 200 OK<br>
    Via: SIP/2.0/UDP 10.23.154.63:6060;branch=<wbr>z9hG4bKe433fa68b81<br>
    From: &quot;IT, Юрьев Сергей&quot;<br>
&lt;<a href="mailto:sip%3A12550@10.23.154.63">sip:12550@10.23.154.63</a>&gt;;tag=<wbr>195594~27154efa-6325-45a2-<wbr>9e47-67e5d9302ebc-237816120<br>
    To: &lt;<a href="mailto:sip%3A62987%25236546@10.23.154.100">sip:62987%236546@10.23.154.<wbr>100</a>&gt;;tag=66NUXXHvB6HBp<br>
    Call-ID: <a href="mailto:86c80-7f71bc46-c44e-3f40000a@10.23.154.63">86c80-7f71bc46-c44e-3f40000a@<wbr>10.23.154.63</a><br>
    CSeq: 101 INVITE<br>
    Contact: &lt;<a href="http://sip:mod_sofia@10.23.154.100:6060" rel="noreferrer" target="_blank">sip:mod_sofia@10.23.154.100:<wbr>6060</a>&gt;<br>
    User-Agent:<br>
FreeSWITCH-mod_sofia/1.7.0+<wbr>git~20160707T165535Z~<wbr>be13536ac9~64bit<br>
    Accept: application/sdp<br>
    Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE,<br>
PRACK, NOTIFY<br>
    Require: timer<br>
    Supported: precondition, 100rel, timer, path, replaces<br>
    Allow-Events: talk, hold, conference, refer<br>
    Session-Expires: 1800;refresher=uac<br>
    Content-Type: application/sdp<br>
    Content-Disposition: session<br>
    Content-Length: 180<br>
<br>
    v=0<br>
    o=- 1475853382 2 IN IP4 172.17.2.3<br>
    s=-<br>
 &gt;&gt;   c=IN IP4 172.17.2.4<br>
    b=AS:64<br>
    t=0 0<br>
    m=audio 3040 RTP/AVP 8 101<br>
    a=rtpmap:8 PCMA/8000<br>
    a=rtpmap:101 telephone-event/8000<br>
    a=ptime:20<br>
<br>
<br>
And a good one - external to internal<br>
send 1162 bytes to udp/[10.23.154.65]:5060 at 12:34:15.132027:<br>
    ------------------------------<wbr>------------------------------<wbr>------------<br>
    INVITE <a href="mailto:sip%3A12550@10.23.154.65">sip:12550@10.23.154.65</a> SIP/2.0<br>
    Via: SIP/2.0/UDP 10.23.154.100:6060;rport;<wbr>branch=z9hG4bKUXyFjDmg8rtmB<br>
    Max-Forwards: 69<br>
    From: &quot;Абонент&quot;<br>
&lt;sip:$(caller_id_number)@<a href="http://10.23.154.100" rel="noreferrer" target="_blank">10.<wbr>23.154.100</a>&gt;;tag=1agg8aZ7FUUBK<br>
    To: &lt;<a href="mailto:sip%3A12550@10.23.154.65">sip:12550@10.23.154.65</a>&gt;<br>
    Call-ID: d8367628-0fc1-4325-998f-<wbr>3f32f9d3a05b<br>
    CSeq: 97580363 INVITE<br>
    Contact: &lt;<a href="mailto:sip%3Agw%2Bcucm-65@10.23.154.100">sip:gw+cucm-65@10.23.154.100</a>:<wbr>6060;transport=udp;gw=cucm-65&gt;<br>
    User-Agent:<br>
FreeSWITCH-mod_sofia/1.7.0+<wbr>git~20160707T165535Z~<wbr>be13536ac9~64bit<br>
    Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE,<br>
PRACK, NOTIFY<br>
    Supported: precondition, 100rel, timer, path, replaces<br>
    Allow-Events: talk, hold, conference, refer<br>
    Content-Type: application/sdp<br>
    Content-Disposition: session<br>
    Content-Length: 268<br>
    X-FS-Support: update_display,send_info<br>
    Remote-Party-ID: &quot;Абонент&quot;<br>
&lt;sip:$(caller_id_number)@<a href="http://10.23.154.100" rel="noreferrer" target="_blank">10.<wbr>23.154.100</a>&gt;;party=calling;<wbr>screen=yes;privacy=off<br>
<br>
    v=0<br>
    o=FreeSWITCH 1475804423 1475804424 IN IP4 10.23.154.100<br>
    s=FreeSWITCH<br>
 &gt;&gt;   c=IN IP4 10.23.154.100<br>
    t=0 0<br>
    m=audio 28432 RTP/AVP 8 18 101 13<br>
    a=rtpmap:8 PCMA/8000<br>
    a=rtpmap:18 G729/8000<br>
    a=rtpmap:101 telephone-event/8000<br>
    a=fmtp:101 0-16<br>
    a=rtpmap:13 CN/8000<br>
    a=ptime:20<br>
<br>
--<br>
Serge S. Yuriev<br>
Senior VoIP engineer<br>
<br>
<br>
______________________________<wbr>______________________________<wbr>_____________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.<wbr>freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.<wbr>org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.<wbr>freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">







<p><font face="courier new, monospace"><b><i><font size="4">Brian West</font></i></b><br><span style="font-size:x-small"><a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a></span></font></p>
<p><font size="1" face="courier new, monospace"><img src="http://billing.freeswitch.org/templates/default/img/whmcslogo.png"><br></font></p><p><font size="2" face="monospace, monospace"><b><i>Twitter: @FreeSWITCH , @briankwest</i></b><br><a href="http://www.freeswitchbook.com" target="_blank">http://www.freeswitchbook.com</a> (50% Discount using code FreeSwitch50)<br><a href="http://www.freeswitchcookbook.com" target="_blank">http://www.freeswitchcookbook.com</a> </font><span style="font-family:monospace,monospace;font-size:small">(50% Discount using code FreeSwitch50)</span><font size="2" face="monospace, monospace"><br></font><a href="https://www.gofundme.com/freeswitch_ubuntu" style="font-size:12.8px" target="_blank"><font face="monospace, monospace">https://www.gofundme.com/freeswitch_ubuntu</font></a></p><p><font face="monospace, monospace">Got Bugs? Report them <a href="https://freeswitch.org/jira" target="_blank">here</a>! | Reddit: <a href="https://www.reddit.com/r/freeswitch" target="_blank">/r/freeswitch</a></font></p>
<p><font size="2" face="monospace, monospace"><b>T:</b>+19184209001 | <b>F:</b>+19184209002 | <b>M:</b>+1918424WEST (9378)<br><b>iNUM:</b>+883 5100 1420 9001 | <b>ISN:</b>410*543 | <b>Skype:</b>briankwest</font></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div>