Behind a PIX, it works
Behind a SonicWall without the SIP_aware option, it doesn't work
Behind a Watchguard, it doesn't work too (and there is no SIP_aware option)
In fact, I have a centrex IP and many clients in the country with, many different
configurations and I have to be sure that all works. It's why I have no enable the
SIP_aware option in the sonicwall.
Thanks for your help,
Thomas
-----Message d'origine-----
De : users-bounces(a)openser.org [mailto:users-bounces@openser.org] De la part de Thomas
Deillon
Envoyé : mercredi, 3. janvier 2007 17:06
À : daniel(a)voice-system.ro
Cc : users(a)openser.org
Objet : RE: [Users] SER as proxy in front of Asterisk
Hi,
In fact, now, every phone does not response.
The options didn't go thought the FW, so, the phone cannot answer.
I don't understand why the traffic don't go thought it !!
I have test this configuration with two firewall: a sonicwall and a soho.
Cheers,
Thomas
-----Message d'origine-----
De : Daniel-Constantin Mierla [mailto:daniel@voice-system.ro]
Envoyé : mercredi, 3. janvier 2007 14:52
À : Thomas Deillon
Cc : users(a)openser.org
Objet : Re: [Users] SER as proxy in front of Asterisk
Hello,
what is the type of NAT/Firewall you have in front of Thomson? As I can
see from the diagram, the phone does not reply to OPTIONS request, and I
guess, the nat/firewall needs outward traffic to keep the pinhole open.
Check why thomson ignores the options requests.
Cheers,
Daniel
On 01/03/07 15:17, Thomas Deillon wrote:
Hi,
I have made more tries and now, all my phones don't work ...
The firewall opens a connection to REGISTER phone but after a while
the OPTION message from the Asterisk will be DROP by the FW ...
You can find a diagram of the exchange here:
http://deillon.eu/tmp/exchange_sip.png
A list of all exchange:
http://deillon.eu/tmp/ip_sip.txt
And all sip message:
http://deillon.eu/tmp/message.txt
Thanks a lot for your help,
Thomas
------------------------------------------------------------------------
*De :* users-bounces(a)openser.org [mailto:users-bounces@openser.org]
*De la part de* Thomas Deillon
*Envoyé :* mardi, 2. janvier 2007 11:44
*À :* users(a)openser.org
*Objet :* [Users] SER as proxy in front of Asterisk
Hi all,
I wish you first a happy new year !!
One again, I ask you some help. Thanks a lot for your patience and
your answers that really helped me.
So, I want to put a SER in front of one Asterisk for the moment (more
after).
All Servers have public IP address and so, I don't care about the
RTP/SDP messages.
All phones are behind NAT somewhere in Switerland :)
I have the configuration below in openser:
modparam("dispatcher", "list_file",
"/etc/openser/dispatcher.list")
#modparam("dispatcher", "force_dst", 1)
modparam("dispatcher", "flags", 2)
modparam("usrloc", "db_mode", 0)
#modparam("rr", "enable_full_lr", 1)
route{
xlog("L_ALERT", "[$rm] from [$fu] to [$tu]\n");
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
exit;
};
if (msg:len >= 2048 ) {
sl_send_reply("513", "Message too big");
exit;
};
# if (search("User-Agent:.*Thomson.*")) {
# };
if ((src_ip==212.xxx.xxx.152) || (src_ip==212.xxx.xxx.153)) {
if(method=="OPTIONS") {
};
avp_pushto("$ru","$tu");
forward();
}else {
fix_nated_contact();
force_rport();
if(method=="REGISTER"){
ds_select_dst("4", "0");
t_relay();
}
else {
ds_select_dst("0", "4");
forward();
}
}
}
And in my dispatcher.list I have:
0 sip:212.xxx.xxx.153:5060
4 sip:212.xxx.xxx.153:5060
With this configuration, a snom phone, a X-lite phone and a Cisco
phone seams to work ....
But with the Thomson ST2030, it doesn't work.
In fact, the Thomson REGISTER on asterisk, the Asterisk send a OPTION
message to the FW IP adress and the right port where the thomson is
and then, after a while, the FW close the connection. The thomson
phone is so "UNREACHABLE" on asterisk status and nobody can call it.
I'm not sure that my configuration is ok in ser but I think that is a
problem with the Thomson2030. Do you had the same kind of problem or
do you understand the problem here ?
Thanks for your help,
Thomas Deillon
------------------------------------------------------------------------
_______________________________________________
Users mailing list
Users(a)openser.org
http://openser.org/cgi-bin/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)openser.org
http://openser.org/cgi-bin/mailman/listinfo/users