Estimado amigos, Tengo el siguiente inconveniente y la situación es la siguiente: INTERNET----<ippublica SER x.x.x.x:5060>----ServerSER----<iplan SER 192.168.1.200:5060>--LAN--<iplan Asterisk 192.168.1.201:5060> Lo que queremos hacer es utilizar SER como un proxy para no exponer asterisk a una ip publica. Si me registro contra el openser con la ip de lan el forward de las llamadas al Asterisk se hace correctamente, pero si intento registrarme contra la ip publica me registro al ser pero no puedo hacer llamadas, el forward a la ip de astrerisk no se hace, te detallo la configuración del cfg de ser, les agradezco mucho en lo que me puedan ayudar. openser.cfg # ----------- global configuration parameters ------------------------ debug=7 # debug level (cmd line: -dddddddddd) fork=yes log_stderror=yes # (cmd line: -E) check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) children=4 listen=192.168.1.200 listen=200.40.119.215 port=5060 # ------------------ module loading ---------------------------------- # use dbtext database mpath="/usr/local/lib/openser/modules/" loadmodule "dbtext.so" loadmodule "sl.so" loadmodule "tm.so" loadmodule "rr.so" loadmodule "maxfwd.so" loadmodule "usrloc.so" loadmodule "registrar.so" loadmodule "textops.so" loadmodule "mi_fifo.so" #loadmodule "mediaproxy.so" #loadmodule "nathelper.so" #loadmodule "acc.so" #loadmodule "exec.so" #loadmodule "xlog.so" # modules for digest authentication loadmodule "auth.so" loadmodule "auth_db.so" # ----------------- setting module-specific parameters --------------- # -- mi_fifo params -- modparam("mi_fifo", "fifo_name", "/tmp/openser_fifo") # -- nathelper #modparam("nathelper", "rtpproxy_disable", 1) #modparam("nathelper", "natping_interval", 30) #modparam("nathelper", "sipping_from", "sip:ping@192.168.0.7") # -- usrloc params -- # use dbtext database for persistent storage modparam("usrloc", "db_mode", 2) modparam("usrloc|auth_db", "db_url", "dbtext:///usr/local/etc/openser/dbtext") # -- auth params -- # modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", "password_column", "password") modparam("auth_db", "user_column", "username") modparam("auth_db", "domain_column", "domain") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); exit; }; if (msg:len >= max_len ) { sl_send_reply("513", "Message too big"); exit; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if (!method=="REGISTER") record_route(); # subsequent messages withing a dialog should take the # path determined by record-routing if (loose_route()) { # mark routing logic in request append_hf("P-hint: rr-enforced\r\n"); route(1); exit; }; if (!uri==myself) { # mark routing logic in request append_hf("P-hint: outbound\r\n"); route(1); exit; }; if (is_method("INVITE")) { rewritehostport("192.168.1.201:5060"); t_relay(); exit; } # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # digest authentication if (!www_authorize("*", "subscriber")) { www_challenge("*", "0"); exit; }; save("location"); exit; }; lookup("aliases"); if (!uri==myself) { append_hf("P-hint: outbound alias\r\n"); route(1); exit; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); exit; }; }; append_hf("P-hint: usrloc applied\r\n"); route(1); } route[1] { # send it out now; use stateful forwarding as it works reliably # even for UDP2TCP if (!t_relay()) { sl_reply_error(); }; }