<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
When you have LAN/WAN setups, you need to turn on mhome (multihoming)
if your SER server has one LAN and one WAN interface. If not, you don't
need that switch. However, you need to make sure that calls between
UAs on the LAN don't get proxied and that contact and SDP fixup are
done correctly. The onsip.org files are meant for a public SER server
where ALL NATed UAs are proxied. This means that it will work if you
set your server on a public address and proxies also all calls between
UAs on your LAN (and your firewall has to support hairpinning, i.e.
"turn in the firewall"). Having SER on a non-public address opens up
some issues (you need to set advertised address and port in your
ser.cfg and). Also, your mediaproxy/rtpproxy must be on a public
address. Rtpproxy has some options (see readme file) that you can use
to tell rtpproxy in which direction LAN/WAN the message is going.<br>
<br>
Of course, if somebody has a working config, you would be better off if
that somebody could post the config to the list. :-)<br>
g-)<br>
<br>
Americania .it wrote:
<blockquote cite="midBAY104-F39E6C72FE8CF7F2E40F94D9930@phx.gbl"
type="cite">Hi,
<br>
I've tried a lot of examples and config. files but still I can't hear
any voice when a call is enstablished between users (Nat) outside the
Lan where ser in installed (local pc IP 10.0.0.133; LAn router Public
IP 80.105.2.110). Tried also from one user outside behind Nat and one
in my Lan .
<br>
I've enclosed trace.log with this case.
<br>
<br>
I've forwarded every ports I think that are needed to 10.0.0.133 (ports
5060 ; udp from 5060 - 5070; 35000 to 35020 ).
<br>
I've recompiled rtpproxy to use the range of ports 35000-35020.
<br>
<br>
I've also tried the config file from onsip.org for rtpproxy and the one
for mediaproxy (with mediaproxy instead of rtpproxy). Whit that config
file I've also problems enstablishing the call from outside to inside
the Lan.
<br>
<br>
With the ser.cfg that is attached here I can enstablish tha call but no
voice (but I can see that 3cx Phone reports packets to be transmitted
from both the clients but no packets are received on them).
<br>
<br>
Can someone help me?
<br>
<br>
<br>
Thanks
<br>
<br>
<br>
<br>
ser.cfg :
<br>
<br>
<br>
# $Id: ser.cfg,v 1.25.2.1 2005/02/18 14:30:44 andrei Exp $
<br>
#
<br>
# simple quick-start config script
<br>
#
<br>
<br>
# ----------- global configuration parameters ------------------------
<br>
<br>
debug=4 # debug level (cmd line: -dddddddddd)
<br>
<br>
/* Uncomment these lines to enter debugging mode */
<br>
fork=no
<br>
log_stderror=yes
<br>
<br>
listen=10.0.0.133
<br>
<br>
alias=80.105.2.110
<br>
<br>
check_via=no # (cmd. line: -v)
<br>
dns=no # (cmd. line: -r)
<br>
rev_dns=no # (cmd. line: -R)
<br>
port=5060
<br>
children=4
<br>
fifo="/tmp/ser_fifo"
<br>
<br>
fifo_db_url="mysql://ser:heslo@localhost/ser"
<br>
<br>
# ------------------ module loading ----------------------------------
<br>
<br>
# Uncomment this if you want to use SQL database
<br>
loadmodule "/usr/lib/ser/modules/mysql.so"
<br>
<br>
loadmodule "/usr/lib/ser/modules/sl.so"
<br>
loadmodule "/usr/lib/ser/modules/tm.so"
<br>
loadmodule "/usr/lib/ser/modules/rr.so"
<br>
loadmodule "/usr/lib/ser/modules/maxfwd.so"
<br>
loadmodule "/usr/lib/ser/modules/usrloc.so"
<br>
loadmodule "/usr/lib/ser/modules/registrar.so"
<br>
#loadmodule "/usr/lib/ser/modules/group.so"
<br>
<br>
# Uncomment this if you want digest authentication
<br>
# mysql.so must be loaded !
<br>
loadmodule "/usr/lib/ser/modules/auth.so"
<br>
loadmodule "/usr/lib/ser/modules/auth_db.so"
<br>
loadmodule "/usr/lib/ser/modules/uri.so"
<br>
loadmodule "/usr/lib/ser/modules/uri_db.so"
<br>
loadmodule "/usr/lib/ser/modules/nathelper.so"
<br>
loadmodule "/usr/lib/ser/modules/textops.so"
<br>
<br>
# ----------------- setting module-specific parameters ---------------
<br>
<br>
modparam("usrloc", "db_mode", 2)
<br>
<br>
modparam("auth_db|uri_db|usrloc",
"db_url","mysql://ser:heslo@localhost/ser")
<br>
modparam("auth_db", "calculate_ha1", yes)
<br>
modparam("auth_db", "password_column", "password")
<br>
<br>
# !! Nathelper
<br>
modparam("nathelper", "natping_interval", 30) # Ping interval 30 s
<br>
modparam("nathelper", "ping_nated_only", 1) # Ping only clients
behind NAT
<br>
<br>
modparam("registrar", "nat_flag", 6)
<br>
<br>
# -- rr params --
<br>
modparam("rr", "enable_full_lr", 1)
<br>
<br>
<br>
# ------------------------- request routing logic -------------------
<br>
<br>
# main routing logic
<br>
<br>
route{
<br>
<br>
# initial sanity checks -- messages with
<br>
# max_forwards==0, or excessively long requests
<br>
if (!mf_process_maxfwd_header("10")) {
<br>
sl_send_reply("483","Too Many Hops");
<br>
break;
<br>
};
<br>
if (msg:len >= 2048 ) {
<br>
sl_send_reply("513", "Message too big");
<br>
break;
<br>
};
<br>
<br>
# !! Nathelper
<br>
# Special handling for NATed clients; first, NAT test is
<br>
# executed: it looks for via!=received and RFC1918 addresses
<br>
# in Contact (may fail if line-folding is used); also,
<br>
# the received test should, if completed, should check all
<br>
# vias for rpesence of received
<br>
if (nat_uac_test("3")) {
<br>
# Allow RR-ed requests, as these may indicate that
<br>
# a NAT-enabled proxy takes care of it; unless it is
<br>
# a REGISTER
<br>
<br>
if (method == "REGISTER" || ! search("^Record-Route:")) {
<br>
log("LOG: Someone trying to register from private IP,
rewriting\n");
<br>
<br>
# This will work only for user agents that support
symmetric
<br>
# communication. We tested quite many of them and majority
is
<br>
# smart enough to be symmetric. In some phones it takes a
configuration
<br>
# option. With Cisco 7960, it is called NAT_Enable=Yes,
with kphone it
<br>
is
<br>
# called "symmetric media" and "symmetric signalling".
<br>
<br>
fix_nated_contact(); # Rewrite contact with source IP of
signalling
<br>
if (method == "INVITE") {
<br>
fix_nated_sdp("1"); # Add direction=active to SDP
<br>
};
<br>
force_rport(); # Add rport parameter to topmost Via
<br>
setflag(6); # Mark as NATed
<br>
};
<br>
};
<br>
<br>
<br>
# we record-route all messages -- to make sure that
<br>
# subsequent messages will go through our proxy; that's
<br>
# particularly good if upstream and downstream entities
<br>
# use different transport protocol
<br>
if (!method=="REGISTER") record_route();
<br>
<br>
# subsequent messages withing a dialog should take the
<br>
# path determined by record-routing
<br>
if (loose_route()) {
<br>
# mark routing logic in request
<br>
append_hf("P-hint: rr-enforced\r\n");
<br>
route(1);
<br>
break;
<br>
};
<br>
<br>
if (!uri==myself) {
<br>
# mark routing logic in request
<br>
append_hf("P-hint: outbound\r\n");
<br>
route(1);
<br>
break;
<br>
};
<br>
<br>
# if the request is for other domain use UsrLoc
<br>
# (in case, it does not work, use the following command
<br>
# with proper names and addresses in it)
<br>
if (uri==myself) {
<br>
<br>
if (method=="REGISTER") {
<br>
<br>
# Uncomment this if you want to use digest authentication
<br>
if (!www_authorize("80.105.2.110", "subscriber")) {
<br>
www_challenge("80.105.2.110", "0");
<br>
break;
<br>
};
<br>
<br>
save("location");
<br>
break;
<br>
};
<br>
<br>
lookup("aliases");
<br>
if (!uri==myself) {
<br>
append_hf("P-hint: outbound alias\r\n");
<br>
route(1);
<br>
break;
<br>
};
<br>
<br>
# native SIP destinations are handled using our USRLOC DB
<br>
if (!lookup("location")) {
<br>
sl_send_reply("404", "Not Found");
<br>
break;
<br>
};
<br>
};
<br>
append_hf("P-hint: usrloc applied\r\n");
<br>
route(1);
<br>
}
<br>
<br>
route[1]
<br>
{
<br>
# !! Nathelper
<br>
# if (uri=~<a class="moz-txt-link-rfc2396E" href="mailto:[@:](192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[0-1])\.)">"[@:](192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[0-1])\.)"</a>
<br>
&& !search("^Route:")){
<br>
# sl_send_reply("479", "We don't forward to private IP
addresses");
<br>
# break;
<br>
# };
<br>
<br>
# if client or server know to be behind a NAT, enable relay
<br>
if (isflagset(6)) {
<br>
force_rtp_proxy();
<br>
};
<br>
<br>
# NAT processing of replies; apply to all transactions (for
example,
<br>
# re-INVITEs from public to private UA are hard to identify as
<br>
# NATed at the moment of request processing); look at replies
<br>
t_on_reply("1");
<br>
<br>
# send it out now; use stateful forwarding as it works reliably
<br>
# even for UDP2TCP
<br>
if (!t_relay()) {
<br>
sl_reply_error();
<br>
};
<br>
}
<br>
<br>
# !! Nathelper
<br>
onreply_route[1] {
<br>
# NATed transaction ?
<br>
if (isflagset(6) && status =~ "(183)|2[0-9][0-9]") {
<br>
fix_nated_contact();
<br>
force_rtp_proxy();
<br>
# otherwise, is it a transaction behind a NAT and we did not
<br>
# know at time of request processing ? (RFC1918 contacts)
<br>
} else if (nat_uac_test("1")) {
<br>
fix_nated_contact();
<br>
};
<br>
}
<br>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Serusers@lists.iptel.org">Serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
</body>
</html>