<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Let me try this.</p>
<p>I have a public network interface connected to the external
profile with ip 1.1.1.1/24 (e.g. of course) I have a private
subnet attached to the internal profile on 192.168.0.2/24. I've
got polycoms registering to 192.168.0.2 using TLS that show up as
192.168.0.1 given they are NAT'd behind this firewall. It seems
that if the devices try to register to .2 via an ip on the same
subnet that NAT detection is not happy. When the clients come
from something totally different it works. Any way to force this
to work?<br>
</p>
<p>Jim<br>
</p>
<div class="moz-cite-prefix">On 1/28/21 5:36 PM, Brian West wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAEJMVkCpxpaQAhUqgBLPzcCLhb0J8ZABoUqNbSdzWr=71bbceQ@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Without a full understanding of your network
topology it's difficult to say.
<div><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, Jan 28, 2021 at 3:53
PM Jim Miller <<a href="mailto:jmiller@wndswp.net"
moz-do-not-send="true">jmiller@wndswp.net</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<p>Brian</p>
<p>Not sure I 100% follow. The clients are on the same /24
as the "internal" profile interface is on. The only thing
is they are behind a NAT. <br>
</p>
<p>What led me to this was I had a previous configuration
whereby the internal and external profiles were on the
same interface IP. When the clients connected to the
internal profile via an totally different public IP, but
also behind a NAT it worked (registrations showed fs_nat
and a fs_path properly). However, for this configuration
when I put the clients on a NAT that was on the same
subnet as the internal and external shared IP it wouldn't
work. I thought maybe this was an issue with the profiles
sharing the same IP. Thus I split it to the configuration
I documented below. It makes me think that the NAT issue
is related to the fact that the profile IP is on the same
subnet as the NAT. <br>
</p>
<p>Jim<br>
</p>
<div>On 1/28/21 10:51 AM, Brian West wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">You will require one profile per nat
interface, you can't cross profiles between
transit providers without it.
<div><br>
</div>
<div>/b</div>
<div><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, Jan 28, 2021
at 7:25 AM Jim Miller <<a
href="mailto:jmiller@wndswp.net" target="_blank"
moz-do-not-send="true">jmiller@wndswp.net</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px
0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">Hi Folks<br>
<br>
I'm running FreeSWITCH Version 1.10.3-release~64bit
(-release 64bit) on<br>
a FreeBSD 12.1 box.<br>
<br>
The issue I'm having is related to NAT, I'm sure no
one has ever seen a<br>
post on this topic....<br>
<br>
My configuration is a box that is multi homed with an
Internet facing<br>
interface and a private IP LAN interface. The clients
(Polycoms) are on<br>
the private LAN interface but behind a NAT (pfsense)
on this subnet. If<br>
I have the clients route directly to the FS box's
private LAN without<br>
NAT I can make this work but as soon as I NAT them
(which I need to for<br>
other reasons) I don't see the registrations show up
with fs_path or the<br>
other variables like I might expect.<br>
<br>
I've fiddled with the apply-nat-acl variable to no
avail. <br>
<br>
Thoughts?<br>
<br>
Thanks<br>
<br>
Jim<br>
<br>
<br>
_________________________________________________________________________<br>
<br>
The FreeSWITCH project is sponsored by SignalWire <a
href="https://signalwire.com" rel="noreferrer"
target="_blank" moz-do-not-send="true">https://signalwire.com</a><br>
Enhance your FreeSWITCH install with disruptive priced
SMS and PSTN services.<br>
Build your next product on our scalable cloud
platform.<br>
<br>
Join our online community to chat in real time <a
href="https://signalwire.community" rel="noreferrer"
target="_blank" moz-do-not-send="true">https://signalwire.community</a><br>
<br>
Professional FreeSWITCH Services<br>
<a href="mailto:sales@freeswitch.com" target="_blank"
moz-do-not-send="true">sales@freeswitch.com</a><br>
<a href="https://freeswitch.com" rel="noreferrer"
target="_blank" moz-do-not-send="true">https://freeswitch.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="https://freeswitch.com/oss" rel="noreferrer"
target="_blank" moz-do-not-send="true">https://freeswitch.com/oss</a><br>
<a href="https://freeswitch.org/confluence"
rel="noreferrer" target="_blank"
moz-do-not-send="true">https://freeswitch.org/confluence</a><br>
<a href="https://cluecon.com" rel="noreferrer"
target="_blank" moz-do-not-send="true">https://cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org"
target="_blank" moz-do-not-send="true">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a
href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users"
rel="noreferrer" target="_blank"
moz-do-not-send="true">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a
href="http://lists.freeswitch.org/mailman/options/freeswitch-users"
rel="noreferrer" target="_blank"
moz-do-not-send="true">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="https://freeswitch.com" rel="noreferrer"
target="_blank" moz-do-not-send="true">https://freeswitch.com</a></blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div style="font-size:12.8px"><font
color="#000000"><br>
</font></div>
<div style="font-size:12.8px">
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Brian West | Co-founder and Developer</font></span></p>
<p
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Need Commercial support? email <a href="mailto:sales@freeswitch.com" target="_blank" moz-do-not-send="true">sales@freeswitch.com</a> </font></span></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">FreeSWITCH Solutions | <a href="https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g" style="color:rgb(17,85,204)" target="_blank" moz-do-not-send="true">17345 Civic Drive #2531 Brookfield, WI 53045</a></font></span></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Email: </span><span style="color:rgb(17,85,204);font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><a href="mailto:brian@freeswitch.com" target="_blank" moz-do-not-send="true">brian@freeswitch.com</a></span></font></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Mobile: <span title="Call with Google Voice">918-424-9378</span></font></span></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Website: </span><a
href="https://www.freeswitch.com/" style="color:rgb(17,85,204)"
target="_blank"
moz-do-not-send="true"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">https://www.FreeSWITCH.com</span></a></font></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-size:9pt;font-family:Arial;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://www.facebook.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://www.facebook.com/signalwireinc?src=email" src="https://lh6.googleusercontent.com/AYfRoSNaDNtMPRMevPn_GqcVEMd5NDRFi0GlluGUWzV6I5TAY_3T2-Tt0IuIXeUtEdYsgNsM8DOYKRKhjmrG_-n2Ga-LCnoNk46sO8VyEma1sBFYdiGJcLRUvkrD1CYHN79qimeg" style="border: none;" moz-do-not-send="true" width="31" height="31"></a> </span><span style="background-color:transparent;font-size:9pt;font-family:Tahoma;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://twitter.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://twitter.com/freeswitch" src="https://lh3.googleusercontent.com/W4SqXyybH2qdAozvtoKjcz736qOjk9LHDwldvs1ahc-WVU0putVMSsUH474KDrJ32jsqi6JDjyUWxqeEkN5I1xSlC5ShYrd1b8NIMUkDzDrtbWQfa6A_90UcygqesBtRLgeFirKa" style="border: none;" moz-do-not-send="true" width="31" height="31"></a></span><br>
</p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr" class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div style="font-size:12.8px"><font
color="#000000"><br>
</font></div>
<div style="font-size:12.8px">
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Brian West | Co-founder and Developer</font></span></p>
<p
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Need Commercial support? email <a href="mailto:sales@freeswitch.com" target="_blank" moz-do-not-send="true">sales@freeswitch.com</a> </font></span></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">FreeSWITCH Solutions | <a href="https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g" style="color:rgb(17,85,204)" target="_blank" moz-do-not-send="true">17345 Civic Drive #2531 Brookfield, WI 53045</a></font></span></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Email: </span><span style="color:rgb(17,85,204);font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><a href="mailto:brian@freeswitch.com" target="_blank" moz-do-not-send="true">brian@freeswitch.com</a></span></font></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font color="#000000">Mobile: <span title="Call with Google Voice">918-424-9378</span></font></span></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.38;margin-top:0pt;margin-bottom:0pt;margin-left:4.5pt"><font
color="#000000"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Website: </span><a
href="https://www.freeswitch.com/"
style="color:rgb(17,85,204)"
target="_blank"
moz-do-not-send="true"><span style="font-size:8pt;font-family:Arial;background-color:transparent;vertical-align:baseline;white-space:pre-wrap">https://www.FreeSWITCH.com</span></a></font></p>
<p dir="ltr"
style="font-size:12.8px;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-size:9pt;font-family:Arial;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://www.facebook.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://www.facebook.com/signalwireinc?src=email" src="https://lh6.googleusercontent.com/AYfRoSNaDNtMPRMevPn_GqcVEMd5NDRFi0GlluGUWzV6I5TAY_3T2-Tt0IuIXeUtEdYsgNsM8DOYKRKhjmrG_-n2Ga-LCnoNk46sO8VyEma1sBFYdiGJcLRUvkrD1CYHN79qimeg" style="border: none;" moz-do-not-send="true" width="31" height="31"></a> </span><span style="background-color:transparent;font-size:9pt;font-family:Tahoma;color:rgb(0,0,0);vertical-align:baseline;white-space:pre-wrap"><a href="https://twitter.com/freeswitch" target="_blank" moz-do-not-send="true"><img alt="https://twitter.com/freeswitch" src="https://lh3.googleusercontent.com/W4SqXyybH2qdAozvtoKjcz736qOjk9LHDwldvs1ahc-WVU0putVMSsUH474KDrJ32jsqi6JDjyUWxqeEkN5I1xSlC5ShYrd1b8NIMUkDzDrtbWQfa6A_90UcygqesBtRLgeFirKa" style="border: none;" moz-do-not-send="true" width="31" height="31"></a></span><br>
</p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</body>
</html>