<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi,<br class=""><br class="">comments below<div class=""><br class=""></div><div class=""><div>Mit freundlichen Grüßen / Best regards</div><div>Roman Dissauer</div><div><br class=""></div><div><div class=""><font face="GillSans-SemiBold" color="#53655a" class=""><b class="">RDI SOLUTIONS e.U.</b></font></div><div class=""><font face="GillSans-Light" color="#4d4e4c" class="">Rosasgasse 13/24</font></div><div class=""><font face="GillSans-Light" color="#4d4e4c" class="">1120 Wien, Österreich</font></div><div class=""><font face="GillSans-Light" color="#4d4e4c" class="">T: +43 1 3530349 - 10</font></div><div class=""><font face="GillSans-Light" color="#4d4e4c" class="">F: +43 1 3530349 - 99</font></div><div class=""><font face="GillSans-Light" color="#4d4e4c" class=""><a href="mailto:roman.dissauer@rdi.at" class="">roman.dissauer@rdi.at</a></font></div><div class=""><font color="#4d4e4c" face="GillSans-SemiBold" class=""><b class=""><a href="http://www.rdi.at" class="">www.rdi.at</a></b></font></div></div></div><div class=""><br class=""><br class=""><blockquote type="cite" class="">Am 30.01.2018 um 06:15 schrieb jungle boogie <<a href="mailto:jungleboogie0@gmail.com" class="">jungleboogie0@gmail.com</a>>:<br class=""><br class="">Hi All,<br class=""><br class="">Can anyone give me some advice? I'll update the docs, if it's needed.<br class=""><br class="">Thanks!<br class=""><br class="">Thus said Jungle Boogie on Sun, 28 Jan 2018 17:51:40 -0800<br class=""><blockquote type="cite" class="">Hi All,<br class="">I have some questions about this page and what folks do when freeswitch is behind NAT:<br class=""><a href="https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal" class="">https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal</a><br class="">1. Do ports need to be opened on the firewall under all circumstances? UDP ports for RTP, for instance.<br class=""></blockquote></blockquote>on internal profile you’ll need to open ports otherwise UA can’t register.<div class="">on external profile you only need to open ports when you get inbound calls without an active register (ip auth calls).<br class=""><blockquote type="cite" class=""><blockquote type="cite" class="">2. Is this always a good idea to enable in sip_profiles/internal.xml?<br class=""><param name="nat-options-ping" value="true“/><br class=""></blockquote></blockquote>if you have UA on the internal profile which are behind NAT themselves it is a good idea to keep the pinhole open in the customers firewall.<br class=""><blockquote type="cite" class=""><blockquote type="cite" class="">3. Is it necessary/recommended to have STUN enabled in vars.xml AND setup the nat-options-ping?<br class=""></blockquote></blockquote>if you mean STUN for registering with external gateways it depends on your firewall config<br class=""><blockquote type="cite" class=""><blockquote type="cite" class="">4. my sip_profile/internal.xml has this:<br class=""><param name="ext-rtp-ip" value="auto-nat"/><br class=""><param name="ext-sip-ip" value="auto-nat"/><br class="">Is this an improvement over what's in confluence of:<br class=""><param name="ext-rtp-ip" value="$${external_rtp_ip}“/><br class=""></blockquote></blockquote>with auto-nat FS checks your IP and if it is RFC1918 range than it enables nat helper features.<br class=""><blockquote type="cite" class=""><blockquote type="cite" class="">5. If the endpoints are configured to connect using TCP, does any of this change what's above?<br class="">thanks!<br class=""></blockquote></blockquote>no changes here...<br class=""><blockquote type="cite" class=""><br class=""><br class=""><br class=""><br class=""><br class="">_________________________________________________________________________<br class="">Professional FreeSWITCH Consulting Services:<br class=""><a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class="">http://www.freeswitchsolutions.com<br class=""><br class="">Official FreeSWITCH Sites<br class="">http://www.freeswitch.org<br class="">http://confluence.freeswitch.org<br class="">http://www.cluecon.com<br class=""><br class="">FreeSWITCH-users mailing list<br class="">FreeSWITCH-users@lists.freeswitch.org<br class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br class="">UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br class="">http://www.freeswitch.org<br class=""></blockquote><br class=""></div></div></body></html>