for more complex networks make your own acl in acl.conf.xml and use it in place of localnet.auto in your sofia profile config. On Fri, Jul 27, 2012 at 9:49 AM, Phil Quesinberry <philq@qsystemsengineering.com> wrote:
With that in mind - in my working configuration with phones both on the local LAN with FS as well as remote natted networks, I have:
./sip_profiles/internal.xml: <param name="apply-nat-acl" value="nat.auto"/> (All extensions are registered to the internal profile)
In most cases, it was necessary to have FS rewrite the contact IP and port for remote extensions.
- Phil
I found someone talking about similar problems. I read that
"... some lines of code in sofia_reg.c
if (is_nat && profile->local_network &&
switch_check_network_list_ip(network_ip, profile->local_network)) {
if (profile->debug) {
switch_log_printf(SWITCH_CHANNEL_LOG,
SWITCH_LOG_DEBUG, "IP %s is on local network, not seting NAT mode.\n",
network_ip);
}
is_nat = NULL;
}
"
So I think there is the possibility to set which are local networks.
Also I found in my sip_profiles for nat-mode contain (as it should be) the ext-
IP declaration:
<param name="ext-sip-ip" value="auto-nat"/>
<param name="ext-rtp-ip" value="auto-nat"/>
but not the line
<param name="apply-nat-acl" value="rfc1918"/>
May be this line solve my problem.
I'll try as soon as possible, but all my FS servers ara actually in production
environments :(
If someone has the chance to test it successfully, please report it.
g
_____________________________________________ From: Phil Quesinberry Sent: Friday, July 27, 2012 10:31 AM
To: 'freeswitch-users@lists.freeswitch.org' Subject: RE: re: AutoNAT - Local Networks not excluded
One other thing comes to mind. A lot of routers (especially SOHO routers) have ALG functionality that can break the SIP signaling, even when the ALG functionality is supposedly turned off. You can usually get around this by changing the SIP port to something other than 5060. If the phones connect via TLS (usually on port 5061) then this shouldn’t be a problem, as they can’t mess with the encrypted traffic.
- Phil
_____________________________________________ From: Phil Quesinberry
Sent: Friday, July 27, 2012 10:24 AM To: 'freeswitch-users@lists.freeswitch.org' Subject: RE: re: AutoNAT - Local Networks not excluded
G,
Are you registering your phones to the internal sip profile? Do you have anything like aggressive NAT detection enabled for that profile? For the extensions, are you rewriting the contact IP/port (is NDLB-connectile-dysfuncion or NDLB-tls-connectile-dysfunction specified for sip-force-contact)?
Do a ‘show registrations’ from the fs_cli as well as a ‘sofia status profile internal reg’ and post the results here (you may want to partially obscure any external IP addresses shown before posting) to give us more of an idea of what’s going on.
- Phil
_____________________________________________ From: Phil Quesinberry
Sent: Tuesday, July 24, 2012 3:19 PM To: 'freeswitch-users@lists.freeswitch.org' Subject: re: AutoNAT - Local Networks not excluded
Set rtp-ip and sip-ip to your internal IP address. I believe that you should also be able to set it to: $${local_ip_v4} or $${bind_server_ip} as well.
- Phil
----------
VirteX g.d.monnezza at tiscali.it Tue Jul 24 16:12:08 MSD 2012
Hi guys. I appreciate so much the Auto-NAT for uPnP capable firewalls. But
I'm experiencing an issue.
I have a FreeSwitch server behind a NAT, but I can't find a way to avoid
FreeSwitch using external IP (for SIP and RTP) for local networks (i.e.
192.168.0.0/16).
In my sip profiles for various interfaces I have NOT set the .
Anyway, the sofia status for all interfaces shows the EXT-RTP-IP and
EXT-SIP-IP set (with my public gateway IP). That's ok, even if I didn'
declard it with
My SIP phones register from a network different from the server one, but
still a local network. Then, SIP phones receive (from the server) the rtp
and sip signalling with its external IP. This prevent any communication.
How it is possible to tell FreeSwitch to NOT use ext IP for particular
networks?
Thanks to anyone who will point me in the right direction.
g
--
View this message in context: http://old.nabble.com/AutoNAT---Local-Networks-not-excluded-tp34201844p34201...
Sent from the Freeswitch-users mailing list archive at Nabble.com.
Phil Quesinberry
Q Systems Engineering, Inc.
Electronic Controls and Embedded Systems Development
(410) 969-8002
http://www.qsystemsengineering.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900