1. set up your local-network-acl . (rfc1918.auto is good start)
2. setup your ext-rtp-ip and ext-sip-ip and MAKE SURE you prefix it with autonat: so it activates the proper behavior for you.

This should be all you have to do so you can talk to devices inside and outside the NAT at the same time.

/b


On Wed, Jul 19, 2017 at 9:30 AM, David Villasmil <david.villasmil.work@gmail.com> wrote:
+1 about forwarding upds... 
But looking at the logs, we can't really see whether the call was processed or not, just that it was "abandoned" and that usually happens when freeswitch responds with a 401/407 and the client never authenticates...

enter:
sofia profile internal siptrace on

to see all messages and make sure the client responds properly and paste the signaling here.
ᐧ

Regards,

David Villasmil

On Wed, Jul 19, 2017 at 4:18 PM, Joel Serrano <joel@gogii.net> wrote:
Double check your ACLs, yes. Also, I'm pretty sure you will also have to forward the RTP port range so you can have audio... Otherwise signaling will work, but your next problem will be one-way-audio.


On Tue, Jul 18, 2017 at 11:43 PM, Jose David Jurado Alonso <josedavid@zennio.com> wrote:

I've installed freeswitch into a local environment and I perform SIP calls well using the server local IP.

This server has connected to ADSL network with a static public IP but when I try to call using the public IP instead of the local IP the server receive the call not work...

The clients can register well (or I think so). Others process like apache work well.

I NAT forwarding in the firewall the next ports: 5060, 5080, 7443.

$ netstat -putan

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 192.168.230.143:2855    0.0.0.0:*               LISTEN      15894/freeswitch
tcp        0      0 192.168.230.143:2856    0.0.0.0:*               LISTEN      15894/freeswitch
tcp        0      0 192.168.230.143:5066    0.0.0.0:*               LISTEN      15894/freeswitch
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      1166/nginx -g daemo
tcp        0      0 192.168.230.143:7443    0.0.0.0:*               LISTEN      15894/freeswitch
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1079/sshd       
tcp        0      0 192.168.230.143:5080    0.0.0.0:*               LISTEN      15894/freeswitch
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      1166/nginx -g daemo
tcp        0      0 192.168.230.143:5060    0.0.0.0:*               LISTEN      15894/freeswitch
tcp        0      0 192.168.230.143:22      192.168.230.167:60298   ESTABLISHED 14816/sshd: ubuntu 
tcp        0      0 192.168.230.143:22      192.168.230.167:60296   ESTABLISHED 14744/sshd: ubuntu 
tcp6       0      0 :::80                   :::*                    LISTEN      1166/nginx -g daemo
tcp6       0      0 :::8021                 :::*                    LISTEN      15894/freeswitch
tcp6       0      0 :::22                   :::*                    LISTEN      1079/sshd       
tcp6       0      0 ::1:5080                :::*                    LISTEN      15894/freeswitch
tcp6       0      0 :::443                  :::*                    LISTEN      1166/nginx -g daemo
tcp6       0      0 ::1:5060                :::*                    LISTEN      15894/freeswitch
udp        0      0 192.168.230.143:5060    0.0.0.0:*                           15894/freeswitch
udp        0      0 192.168.230.143:5080    0.0.0.0:*                           15894/freeswitch
udp        0      0 0.0.0.0:68              0.0.0.0:*                           1019/dhclient   
udp6       0      0 ::1:5060                :::*                                15894/freeswitch
udp6       0      0 ::1:5080                :::*                                15894/freeswitch

$ fs_cli -x "sofia status"

                     Name      Type                                       Data  State
=================================================================================================
            external-ipv6   profile                   sip:mod_sofia@[::1]:5080  RUNNING (0)
          192.168.230.143     alias                                   internal  ALIASED
                 external   profile         sip:mod_sofia@192.168.230.143:5080  RUNNING (0)
    external::example.com   gateway                    sip:joeuser@example.com  NOREG
            internal-ipv6   profile                   sip:mod_sofia@[::1]:5060  RUNNING (0)
                 internal   profile         sip:mod_sofia@192.168.230.143:5060  RUNNING (0)
=================================================================================================

$ fs_cli -x "sofia status profile external"

=================================================================================================
Name                external
Domain Name         N/A
Auto-NAT            false
DBName              sofia_reg_external
Pres Hosts          
Dialplan            XML
Context             public
Challenge Realm     auto_to
RTP-IP              192.168.230.143
SIP-IP              192.168.230.143
URL                 sip:mod_sofia@192.168.230.143:5080
BIND-URL            sip:mod_sofia@192.168.230.143:5080;transport=udp,tcp
HOLD-MUSIC          local_stream://moh
OUTBOUND-PROXY      N/A
CODECS IN           OPUS,G722,PCMU,PCMA,VP8,H264
CODECS OUT          OPUS,G722,PCMU,PCMA,VP8,H264
TEL-EVENT           101
DTMF-MODE           rfc2833
CNG                 13
SESSION-TO          0
MAX-DIALOG          0
NOMEDIA             false
LATE-NEG            true
PROXY-MEDIA         false
ZRTP-PASSTHRU       true
AGGRESSIVENAT       false
CALLS-IN            0
FAILED-CALLS-IN     0
CALLS-OUT           0
FAILED-CALLS-OUT    0
REGISTRATIONS       0

$ grep -r '"ext-' *

sip_profiles/external.xml:    <param name="ext-rtp-ip" value="auto-nat"/>
sip_profiles/external.xml:    <param name="ext-rtp-ip" value="auto-nat"/>
sip_profiles/internal.xml:    <param name="ext-rtp-ip" value="auto-nat"/>
sip_profiles/internal.xml:    <param name="ext-sip-ip" value="auto-nat"/>

When I perform a call the freeswitch.log file show:

df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:44:51.218939 [NOTICE] switch_channel.c:1104 New Channel sofia/internal/1009@192.168.230.143:5060 [df895d9a-30f2-40b5-97bb-56e222c1c45f]
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:44:51.218939 [DEBUG] switch_core_state_machine.c:584 (sofia/internal/1009@192.168.230.143:5060) Running State Change CS_NEW (Cur 1 Tot 7)
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:44:51.218939 [DEBUG] sofia.c:10067 sofia/internal/1009@192.168.230.143:5060 receiving invite from 88.33.111.22:57076 version: 1.9.0 -493-13f2f2a 64bit
2017-07-18 14:44:51.218939 [DEBUG] sofia.c:10238 IP 88.33.111.22 Rejected by acl "domains". Falling back to Digest auth.
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:44:51.218939 [DEBUG] switch_core_state_machine.c:603 (sofia/internal/1009@192.168.230.143:5060) State NEW
2017-07-18 14:44:51.218939 [DEBUG] sofia.c:2405 detaching session df895d9a-30f2-40b5-97bb-56e222c1c45f

and passed some seconds:

df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [WARNING] switch_core_state_machine.c:687 df895d9a-30f2-40b5-97bb-56e222c1c45f sofia/internal/1009@192.168.230.143:5060 Abandoned
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [NOTICE] switch_core_state_machine.c:690 Hangup sofia/internal/1009@192.168.230.143:5060 [CS_NEW] [WRONG_CALL_STATE]
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:584 (sofia/internal/1009@192.168.230.143:5060) Running State Change CS_HANGUP (Cur 1 Tot 7)
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:850 (sofia/internal/1009@192.168.230.143:5060) Callstate Change DOWN -> HANGUP
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:852 (sofia/internal/1009@192.168.230.143:5060) State HANGUP
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] mod_sofia.c:449 Channel sofia/internal/1009@192.168.230.143:5060 hanging up, cause: WRONG_CALL_STATE
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:60 sofia/internal/1009@192.168.230.143:5060 Standard HANGUP, cause: WRONG_CALL_STATE
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:852 (sofia/internal/1009@192.168.230.143:5060) State HANGUP going to sleep
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:619 (sofia/internal/1009@192.168.230.143:5060) State Change CS_HANGUP -> CS_REPORTING
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:584 (sofia/internal/1009@192.168.230.143:5060) Running State Change CS_REPORTING (Cur 1 Tot 7)
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:938 (sofia/internal/1009@192.168.230.143:5060) State REPORTING
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:174 sofia/internal/1009@192.168.230.143:5060 Standard REPORTING, cause: WRONG_CALL_STATE
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:938 (sofia/internal/1009@192.168.230.143:5060) State REPORTING going to sleep
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:610 (sofia/internal/1009@192.168.230.143:5060) State Change CS_REPORTING -> CS_DESTROY
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_session.c:1713 Session 7 (sofia/internal/1009@192.168.230.143:5060) Locked, Waiting on external entities
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [NOTICE] switch_core_session.c:1731 Session 7 (sofia/internal/1009@192.168.230.143:5060) Ended
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [NOTICE] switch_core_session.c:1735 Close Channel sofia/internal/1009@192.168.230.143:5060 [CS_DESTROY]
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/1009@192.168.230.143:5060) Running State Change CS_DESTROY (Cur 0 Tot 7)
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:751 (sofia/internal/1009@192.168.230.143:5060) State DESTROY
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] mod_sofia.c:354 sofia/internal/1009@192.168.230.143:5060 SOFIA DESTROY
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:181 sofia/internal/1009@192.168.230.143:5060 Standard DESTROY
df895d9a-30f2-40b5-97bb-56e222c1c45f 2017-07-18 14:45:01.258940 [DEBUG] switch_core_state_machine.c:751 (sofia/internal/1009@192.168.230.143:5060) State DESTROY going to sleep

Can it be an ACL or sip_profile bad configuration?? Router firewall configuration maybe?


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--

Brian West
brian@freeswitch.org

Twitter: @FreeSWITCH , @briankwest

http://www.freeswitchbook.com 
http://www.freeswitchcookbook.com

Book a phone call (CST)

Allison prompts for FreeSWITCH:

https://www.gofundme.com/allison-prompts-for-freeswitch

Got Bugs? Report them here! | Reddit: /r/freeswitch

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
Skype:briankwest