|
||||||||||
> Are we using an Asterisk server here? > Thanks Sir; you solved the problem ;-) Best regards, Guido > If so why are you not using "canreinvite=no" on the phones? This way you > can force the Asterisk server to managed the whole call SIP, RTP etc as > well as any transcoding that might be needed. You'll then elimitante the > need to have NAT going to all of your handsets which won't work anyway. > > On Tue, 2006-04-25 at 11:08 +0200, Holger Bauer wrote: > > That is not possible. NAT can't work that way (forwarding the same range of > the same public IP to different internal IPs). If your SIP Provider offers a > STUN Server try using this one. It should help with NAT-Traversal without the > need for portforwards or NATs. > > > > If you only add a firewall rule without adding NAT it won't work for > internal IPs (unless you route traffic what you don't do and what is not > possible with your setup). > > > > Holger > > > > > -----Original Message----- > > > From: Guido Quiram [mailto:guido at quiram dot org] > > > Sent: Tuesday, April 25, 2006 11:03 AM > > > To: Carsten Holbach; m0n0wall at lists dot m0n0 dot ch > > > Subject: Re: [m0n0wall] Port still get's blocked while allowed by > > > firewallrule > > > > > > > > > > Heya > > > > > > > > Did you set up incoming NAT for that? > > > > > > Nope, haven't as I have various internal SIP clients that use > > > the port > > > range UDP 11000 to 11009. Therefore I cannot set up incoming > > > NAT to only > > > one internal client. > > > > > > Basically I wonna allow incoming UDP traffic on ports 11000 > > > to 11009 to > > > any internal device (maybe limitating to a couple of external IP > > > addresses of the VoIP providers. > > > > > > Any idea? Thanks much so far and best regards, Guido > > > > > > > > > > > > Guido Quiram schrieb: > > > > Hi, > > > > > > > > sorry in case my prob has been already discussed for a thousand of > > > times... I searched the archive, but can't find a direct solution. > > > > > > > > I have an active firewall rule allowing all UDP to come > > > in from any > > > IP and any port to reach the "LAN net" on ports 11000 - 11009 > > > (RTP for > > > VoIP). > > > > > > > > However, my log tells me the following was blocked: > > > > If Source Destination Proto > > > > WAN provideripaddress.ch:37490 myip.ch:11002 UDP > > > > > > > > What's wrong? > > > > > > > > Thanks much, > > > > > > > > > > > > Guido > > > > > > > > > > > --------------------------------------------------------------------- > > > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > > > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > > > > > > > > > ____________ > > Virus checked by G DATA AntiVirusKit > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > > > > > > > |