That all works below.
got one way audio, and no dtmf (and I know why)
media handoff is wrong.

system is the freewitch 1.2.3 package on pfsense (freebsd, 7.2, i386)

during the invite, this gets sent:


     Contact: <sip:gw+secnap.com@204.89.241.135:5060;transport=udp>
            Contact Binding: <sip:gw+secnap.com@204.89.241.135:5060;transport=udp>
                URI: <sip:gw+secnap.com@204.89.241.135:5060;transport=udp>
                    SIP contact address: sip:gw+secnap.com@204.89.241.135:5060

NOW, that doesn't look all that bad, except that
1) the public ip address is 204.89.241.151
2) the private ip is 192.168.0.3


[pfsense: wan port is 204.89.241.135]
[pfsense lan port is 192.168.0.1]
sipx is at 192.168.0.2  see sip_profiles:  ./conf/sip_profiles/external/sipx.xml:
  <param name="from-domain" value="192.168.0.2"/>
      <param name="proxy" value="192.168..0.2:5080"/>  <!-- 192.168.0.2 listens to 5080 for TRUNKS -->
      <param name="expire-seconds" value="600"/>
      <param name="register" value="false"/>
      <param name="retry-seconds" value="30"/>
      <param name="context" value="public"/>

I edited vars and have
  <X-PRE-PROCESS cmd="set" data="domain=secnap.com"/>
  <X-PRE-PROCESS cmd="set" data="local_ip_v4=192.168.0.3"/>


    <list name="localnet.auto" default="allow">
     <node type="allow" cidr="196.168.0.0/16"/>
    </list>

    <list name="lan" default="allow">
      <node type="deny" cidr="192.168.0.0/16"/>
      <node type="allow" cidr="192.168..0.3/32"/>
    </list>

I still see this in ../freeswitch.log (and I can't find that ip ANYWHERE.  yes, its

o=FreeSWITCH 1282812037 1282812038 IN IP4 204.89.241.135
c=IN IP4 204.89.241.135
o=FreeSWITCH 1282814358 1282814359 IN IP4 204.89.241.135
c=IN IP4 204.89.241.135
2010-08-26 12:03:22.237567 [NOTICE] switch_core.c:915 Adding 204.89.241.135/255.255.255.0 (deny) to list nat.auto
2010-08-26 12:03:22.237607 [NOTICE] switch_core.c:934 Adding 204.89.241.135/255.255.255.0 (allow) to list localnet.auto

I have verified the OUTBOUND natting works: (im assuming when I set local_ip_ to 192.168.0.3 that it actually did it.


telnet -s 192.168.0.3 www.whatismyip.org 80
Trying 98.207.226.113...
Connected to www.whatismyip.org.
Escape character is '^]'.
GET / HTTP/1.0

HTTP/1.0 200 OK
Content-Type: text/plain

204.89.241.151Connection closed by foreign host.


wireshark dumps confirm it:

 Message Header
        Via: SIP/2.0/UDP 192.168..0.3;rport=5060;branch=z9hG4bKXQQUvXFZDUymB;received=192.168..0.3
            Transport: UDP


--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
> | SECNAP Network Security Corporation

This email has been scanned and certified safe by SpammerTrap®.
For Information please see http://www.secnap.com/products/spammertrap/