[Kamailio-Users] what is the best solution NAT problem

Hi list, I am trying to solve my nat problem with openser 1.3.2 and rtpproxy 1.1, I have my openser with 2 net cards. I detail my scenario: (192.168.10.1) LAN-eth1- Server Openser eth0-WAN (192.168.1.64)<-> NAT <-> ADSL dyndns <-> Internet <-> ADSL <-> NAT <-> UAC All my external clients are also behind an ADSL with address private ip and my server openser, I don't have ip it public but register a domain with dyndns and it configures it in my router adsl, I have access from out to my server through dyndns. All my external clients configure them so that they use of address proxy the dyndns domain, my external clients register but when they call to another UAC that this behind the server openser is not audio, and if a UAC that this behind the server openser calls an external client the call doesn't arrive he fails. I have open the ports UDP 5060:5065, 10000:20000, 35000:65000 TCP: 5060 some idea of like I can solve this problem?... best regards all list rickygm ### LOG SIP ### U +1.744617 192.168.10.30:5062 -> 192.168.10.1:5060 SIP/2.0 200 OK Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK2fc9.6c704556.0 Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-de71d299 Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> From: <sip:122@gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 To: <sip:113@gnuforever.homelinux.com>;tag=a5f269a554788978 Call-ID: 6f8c5fed-1d1d043e(a)192.168.0.60 CSeq: 102 INVITE User-Agent: Grandstream GXP2020 1.1.6.16 Contact: <sip:113@192.168.10.30:5062;transport=udp> Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE Content-Type: application/sdp Supported: replaces, timer Content-Length: 214 v=0 o=113 8000 8000 IN IP4 192.168.10.30 s=SIP Call c=IN IP4 192.168.10.30 t=0 0 m=audio 5004 RTP/AVP 18 101 a=sendrecv a=rtpmap:18 G729/8000 a=ptime:30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 # U +0.000481 192.168.1.64:5060 -> 190.184.35.4:5063 SIP/2.0 200 OK Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-de71d299 Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> From: <sip:122@gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 To: <sip:113@gnuforever.homelinux.com>;tag=a5f269a554788978 Call-ID: 6f8c5fed-1d1d043e(a)192.168.0.60 CSeq: 102 INVITE User-Agent: Grandstream GXP2020 1.1.6.16 Contact: <sip:113@192.168.10.30:5062;transport=udp> Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE Content-Type: application/sdp Supported: replaces, timer Content-Length: 232 P-hint: onreply_route|force_rtp_proxy v=0 o=113 8000 8000 IN IP4 192.168.10.30 s=SIP Call c=IN IP4 192.168.1.64 t=0 0 m=audio 35006 RTP/AVP 18 101 a=sendrecv a=rtpmap:18 G729/8000 a=ptime:30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-11 a=nortpproxy:yes # U +0.219110 190.184.35.4:5063 -> 192.168.1.64:5060 ACK sip:113@192.168.10.30:5062;transport=udp SIP/2.0 Via: SIP/2.0/UDP 192.168.0.60:5063;branch=z9hG4bK-547056da From: <sip:122@gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 To: <sip:113@gnuforever.homelinux.com>;tag=a5f269a554788978 Call-ID: 6f8c5fed-1d1d043e(a)192.168.0.60 CSeq: 102 ACK Max-Forwards: 70 Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3>, <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113@gnuforever.homelinux.com",algorithm=MD5,response="ec45ed24126b924160da73b8ba10e73d" Contact: <sip:122@192.168.0.60:5063> User-Agent: Linksys/SPA942-5.2.8 Content-Length: 0 # U +0.000944 192.168.10.1:5060 -> 192.168.10.30:5062 ACK sip:113@192.168.10.30:5062;transport=udp SIP/2.0 Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK2fc9.6c704556.2 Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-547056da From: <sip:122@gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 To: <sip:113@gnuforever.homelinux.com>;tag=a5f269a554788978 Call-ID: 6f8c5fed-1d1d043e(a)192.168.0.60 CSeq: 102 ACK Max-Forwards: 69 Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113@gnuforever.homelinux.com",algorithm=MD5,response="ec45ed24126b924160da73b8ba10e73d" Contact: <sip:122@190.184.35.4:5063;nat=yes> User-Agent: Linksys/SPA942-5.2.8 Content-Length: 0 # U +0.140447 192.168.1.64:5060 -> 190.184.35.4:5063 OPTIONS sip:190.184.35.4:5063 SIP/2.0 Via: SIP/2.0/UDP 192.168.1.64:5060;branch=0 From: sip:pinger@192.168.1.64;tag=f7508b75 To: sip:190.184.35.4:5063 Call-ID: 29b7fe71-06901b84-fa6(a)192.168.1.64 CSeq: 1 OPTIONS Content-Length: 0 # U +0.164881 190.184.35.4:5063 -> 192.168.1.64:5060 SIP/2.0 404 Not Found To: sip:190.184.35.4:5063;tag=a04ea06caeb3256i3 From: sip:pinger@192.168.1.64;tag=f7508b75 Call-ID: 29b7fe71-06901b84-fa6(a)192.168.1.64 CSeq: 1 OPTIONS Via: SIP/2.0/UDP 192.168.1.64:5060;branch=0 Server: Linksys/SPA942-5.2.8 Content-Length: 0 # U +1.195009 192.168.10.28:5060 -> 192.168.10.1:5060 # U +0.639899 192.168.10.1:5060 -> 192.168.10.27:5060 OPTIONS sip:192.168.10.27:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.10.1:5060;branch=0 From: sip:pinger@192.168.1.64;tag=08508b75 To: sip:192.168.10.27:5060 Call-ID: 29b7fe71-16901b84-1b6(a)192.168.10.1 CSeq: 1 OPTIONS Content-Length: 0 # U +0.001412 192.168.10.27:5060 -> 192.168.10.1:5060 SIP/2.0 200 OK Via: SIP/2.0/UDP 192.168.10.1:5060;branch=0 From: sip:pinger@192.168.1.64;tag=08508b75 To: sip:192.168.10.27:5060;tag=b1e56101b3b09b53 Call-ID: 29b7fe71-16901b84-1b6(a)192.168.10.1 CSeq: 1 OPTIONS User-Agent: Grandstream GXV3000 1.1.3.14 Contact: <sip:120@192.168.10.27:5060> Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK Supported: replaces, timer, 100rel, path Content-Length: 0 # U +3.393457 190.184.35.4:5063 -> 192.168.1.64:5060 BYE sip:113@192.168.10.30:5062;transport=udp SIP/2.0 Via: SIP/2.0/UDP 192.168.0.60:5063;branch=z9hG4bK-f7539b7 From: <sip:122@gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 To: <sip:113@gnuforever.homelinux.com>;tag=a5f269a554788978 Call-ID: 6f8c5fed-1d1d043e(a)192.168.0.60 CSeq: 103 BYE Max-Forwards: 70 Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3>, <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113@192.168.10.30:5062",algorithm=MD5,response="4416adbfacebc76ed9cc3f002ff958a1" User-Agent: Linksys/SPA942-5.2.8 Content-Length: 0 # U +0.000768 192.168.10.1:5060 -> 192.168.10.30:5062 BYE sip:113@192.168.10.30:5062;transport=udp SIP/2.0 Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK3fc9.1cba8107.0 Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-f7539b7 From: <sip:122@gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 To: <sip:113@gnuforever.homelinux.com>;tag=a5f269a554788978 Call-ID: 6f8c5fed-1d1d043e(a)192.168.0.60 CSeq: 103 BYE Max-Forwards: 69 Proxy-Authorization: Digest username="122",realm="gnuforever.homelinux.com",nonce="48f260b8529fd8e9d8f0247fa92f734a317f2da5",uri="sip:113@192.168.10.30:5062",algorithm=MD5,response="4416adbfacebc76ed9cc3f002ff958a1" User-Agent: Linksys/SPA942-5.2.8 Content-Length: 0 # U +0.055972 192.168.10.30:5062 -> 192.168.10.1:5060 SIP/2.0 200 OK Via: SIP/2.0/UDP 192.168.10.1;branch=z9hG4bK3fc9.1cba8107.0 Via: SIP/2.0/UDP 192.168.0.60:5063;rport=5063;received=190.184.35.4;branch=z9hG4bK-f7539b7 Record-Route: <sip:192.168.10.1;r2=on;lr=on;ftag=636fc42148cbcd9ao3> Record-Route: <sip:192.168.1.64;r2=on;lr=on;ftag=636fc42148cbcd9ao3> From: <sip:122@gnuforever.homelinux.com>;tag=636fc42148cbcd9ao3 To: <sip:113@gnuforever.homelinux.com>;tag=a5f269a554788978 Call-ID: 6f8c5fed-1d1d043e(a)192.168.0.60 CSeq: 103 BYE User-Agent: Grandstream GXP2020 1.1.6.16 Contact: <sip:113@192.168.10.30:5062;transport=udp> Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE Supported: replaces, timer Content-Length: 0