[Serusers] checking source ip and dest ip

[nick]

İlker Aktuna (Koç.net) wrote:
> 
> In fact, I am not looking for "if address is NATed or not", I need to 
> check if address belongs to my network or not.
>  
> what do you mean by RFC1918 addresses ?
>  
> Thanks,
> ilker
> 
> ------------------------------------------------------------------------
> *From:* Greger V. Teigre [mailto:greger at teigre.com]
> *Sent:* Tuesday, June 20, 2006 1:40 PM
> *To:* İlker Aktuna (Koç.net)
> *Cc:* serusers at iptel.org
> *Subject:* Re: [Serusers] checking source ip and dest ip
> 
> Why not test for RFC1918 addresses? That's what the onsip.org 
> nat-handling scripts do. A NATed destination is determined by a flag in 
> the location record and the src ip is checked with nat_uac_test().  It 
> will give a more robust NAT handling that testing on IP addresses for 
> parts of the RFC1918 addresses.
> The problem has already been solved, why not reuse? ;-)
> g-)
> 
> İlker Aktuna (Koç.net) wrote:
> 
>> Hi,
>>  
>> I need to check source ip of a SIP message and also destination IP to 
>> which the message will be sent.
>> i.e. I will use mediaproxy only if the one of the ip addresses match 
>> 10.0.0.0 / 255.0.0.0
>>  
>> is it possible ?
>>  
>> Thanks,
>> ilker
>> C "-//W3C//DTD HTML 4.0 Transitional//EN">
>> In fact, I am not looking for "if address is NATed or not", I need to 
>> check if address belongs to my network or not.
>>  
>> what do you mean by RFC1918 addresses ?
>>  
>> Thanks,
>> ilker
>>
>> ------------------------------------------------------------------------
>> *From:* Greger V. Teigre [mailto:greger at teigre.com]
>> *Sent:* Tuesday, June 20, 2006 1:40 PM
>> *To:* İlker Aktuna (Koç.net)
>> *Cc:* serusers at iptel.org
>> *Subject:* Re: [Serusers] checking source ip and dest ip
>>
>> Why not test for RFC1918 addresses? That's what the onsip.org 
>> nat-handling scripts do. A NATed destination is determined by a flag 
>> in the location record and the src ip is checked with nat_uac_test().  
>> It will give a more robust NAT handling that testing on IP addresses 
>> for parts of the RFC1918 addresses.
>> The problem has already been solved, why not reuse? ;-)
>> g-)
>>
>> İlker Aktuna (Koç.net) wrote:
>>
>>> Hi,
>>>  
>>> I need to check source ip of a SIP message and also destination IP to 
>>> which the message will be sent.
>>> i.e. I will use mediaproxy only if the one of the ip addresses match 
>>> 10.0.0.0 / 255.0.0.0
>>>  
>>> is it possible ?
>>>  
>>> Thanks,
>>> ilker
>>
>>
>>
>> <http://387555.sigclick.mailinfo.com/sigclick/02090600/07064D00/01080049/0011115231.jpg>
>> _____________________________________________________________________________________________________________________________________________
>> Bu e-posta mesaji kisiye ozel olup, gizli bilgiler iceriyor olabilir. 
>> Eger bu e-posta mesaji size yanlislikla ulasmissa,  icerigini hic bir 
>> sekilde kullanmayiniz ve ekli dosyalari acmayiniz. Bu durumda lutfen 
>> e-posta mesajini kullaniciya hemen geri gonderiniz  ve  tum 
>> kopyalarini mesaj kutunuzdan siliniz. Bu e-posta mesaji, hic bir 
>> sekilde, herhangi bir amac icin cogaltilamaz, yayinlanamaz ve para 
>> karsiligi satilamaz.  Bu e-posta mesaji viruslere karsi anti-virus 
>> sistemleri tarafindan taranmistir. Ancak yollayici, bu e-posta 
>> mesajinin - virus koruma sistemleri ile kontrol ediliyor olsa bile - 
>> virus icermedigini garanti etmez ve meydana gelebilecek zararlardan 
>> dogacak hicbir sorumlulugu kabul etmez.
>> This message is intended solely for the use of the individual or 
>> entity to whom it is addressed , and may contain confidential  
>> information. If you are not the intended recipient of this message or 
>> you receive this mail in error, you should refrain from making any use 
>> of the contents and from opening any attachment. In that case, please 
>> notify the sender immediately and return the message to the sender, 
>> then, delete and destroy all copies. This e-mail message, can not be 
>> copied, published or sold for any reason. This e-mail message has been 
>> swept by anti-virus systems for the presence of computer viruses. In 
>> doing so, however,  sender  cannot warrant that virus or other forms 
>> of data corruption may not be present and do not take any 
>> responsibility in any occurrence.
>> _____________________________________________________________________________________________________________________________________________
>>
>>
>>------------------------------------------------------------------------
>>
>>_______________________________________________
>>Serusers mailing list
>>Serusers at lists.iptel.org
>>http://lists.iptel.org/mailman/listinfo/serusers



RFC 1918 - Address Allocation for Private Internets

addresses like 10.0.0.x or 192.168.x are "private" ip addresses, they 
can only exist behind NAT gateways, and cannot be connected directly to 
the internet.

Is your mediaproxy inside or outside your NAT gateway?