[Users] Question concerning nathelper and rtpproxy

Hi, I'm trying to get nathelper and rtpproxy to work, following the guide found on onsip.org, but unfortunately, it does not work correctly for. Don't know why. My setup is the following: SIP-Phone (170.127.120.189) -> Proxy1 (62.191.185.30) -> Proxy2 (62.191.185.147) -> PSTN-GW (139.4.200.6) Proxy1 supports authentication and handles the NAT travseral stuff. Since in the current testbed, SIP-Phone is not actual behind a NAT device I bypassed the test in the openser configuration to recognize this phone as "nated". What I see is, for a not nated phone, that the signaling goes the chain as drawn above and the media stream goes from the phone to the ngw and vice-versa, as I've expected. Everything is fine in this case. For a nated phone, the signaling again goes through the chain, but the media stream from the phone goes to the rtpproxy on Proxy1, which tries to send it to Proxy2, where no rtpproxy is running, and thereby an "ICMP port unreachable" is returned (which actual does prevent the rtpproxy from continously sending the media stream). Digging into the SIP and SDP is see the following: SIP-Phone sends an INVITE to Proxy1, in the SDP it has "Connection Information: 170.127.120.189" (IP of the phone) Proxy1 replies with "100 Trying" and sends the INVITE to Proxy2, in the SDP it has now "Connection Information: 62.191.185.30" (IP of Proxy1), as I've expected. Proxy2 replied with "100 Trying" and sends the INVITE to the ngw, in the SDP it still has "Connection Information: 62.191.185.30". Now the ngw sends "183 Session Progress" to Proxy2, which has in the SDP "Connection Information: 139.4.200.6" (IP of the ngw). Proxy2 sends "183 Session Progress" to Proxy1, still with "Connection Information: 139.4.200.6" in the SDP. Finally Proxy1 sends "183 Session Progress" to the phone, now with "Connection Information: 62.191.185.30" (IP of Proxy1) in the SDP, as I've expected, since the phone should send the media stream through the rtpproxy running on Proxy1. The phone sends the media stream as expected to Proxy1. But, and this is the problem, the rtpproxy sends the media stream not to the ngw, as I've expected looking into "SDP Connection Information" received by this box, but to Proxy2, which never was mentioned in a Connection Information. When starting rtpproxy with -f, I saw the it was asked by openser/nathelper to proxy between the phone and Proxy2, so the rtpproxy seems to work correctly. But why asks the nathelper on Proxy1 to proxy the media between the phone and Proxy2 and not, as I've expected between the phone and the ngw? My openser configuration is attached, if someone would be so nice to have a look and send a hint for me. Thanks, Wolfgang # # $Id: openser.cfg,v 1.5 2005/10/28 19:45:33 bogdan_iancu Exp $ # # ----------- global configuration parameters ------------------------ debug=3 # debug level (cmd line: -dddddddddd) fork=yes log_stderror=yes # (cmd line: -E) /* Uncomment these lines to enter debugging mode fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 children=4 fifo="/tmp/openser_fifo" # ------------------ module loading ---------------------------------- loadmodule "/opt/openser/lib/openser/modules/sl.so" loadmodule "/opt/openser/lib/openser/modules/tm.so" loadmodule "/opt/openser/lib/openser/modules/rr.so" loadmodule "/opt/openser/lib/openser/modules/maxfwd.so" loadmodule "/opt/openser/lib/openser/modules/usrloc.so" loadmodule "/opt/openser/lib/openser/modules/registrar.so" loadmodule "/opt/openser/lib/openser/modules/textops.so" loadmodule "/opt/openser/lib/openser/modules/auth.so" loadmodule "/opt/openser/lib/openser/modules/auth_radius.so" loadmodule "/opt/openser/lib/openser/modules/xlog.so" loadmodule "/opt/openser/lib/openser/modules/nathelper.so" loadmodule "/opt/openser/lib/openser/modules/uri.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- modparam("usrloc", "db_mode", 0) #modparam("rr", "enable_full_lr", 1) modparam("xlog", "buf_size", 8192) modparam("auth_radius", "radius_config", "/opt/openser/etc/openser/radiusclient.conf") modparam("auth", "rpid_prefix", "<sip:") modparam("auth", "rpid_suffix", &quot;(a)62.191.185.30&gt;;screen=yes;privacy=off&quot;) modparam("auth", "rpid_avp", "rpid") modparam("registrar", "nat_flag", 6) modparam("nathelper", "natping_interval", 30) modparam("nathelper", "ping_nated_only", 1) modparam("nathelper", "rtpproxy_sock", "unix:/opt/rtpproxy/sock/rtpproxy.sock") # ------------------------- request routing logic ------------------- # main routing logic route{ xlog("L_NOTICE", "REQUEST: $rm, $ru, $si\n"); if (method != "REGISTER") { record_route(); } if (method == "BYE" || method == "CANCEL") { unforce_rtp_proxy(); } if (src_ip == "170.127.120.189") { xlog("L_NOTICE", "*** FOUND THAT PHONE\n"); setflag(6); force_rport(); } if (loose_route()) { xlog("L_NOTICE", "*** loose routing enforced\n"); if (has_totag() && (method == "INVITE" || method == "ACK")) { if (nat_uac_test("3")) { xlog("L_NOTICE", "*** found NAT (1) !\n"); setflag(6); force_rport(); fix_nated_contact(); } force_rtp_proxy("l"); } route(1); return; } if (uri != myself) { xlog("L_NOTICE", "*** uri != myself\n"); sl_send_reply("483", "will not handle this"); return; } if (method == "CANCEL") { xlog("L_NOTICE", "*** cancel\n"); route(1); return; } else if (method == "INVITE") { xlog("L_NOTICE", "*** invite\n"); route(3); return; } else if (method == "REGISTER") { xlog("L_NOTICE", "*** register\n"); route(2); return; } xlog("L_NOTICE", "*** at the end: $rm\n"); route(1); return; } route[1] { t_on_reply("1"); if (!t_relay()) { if (method == "INVITE" && isflagset(6)) { unforce_rtp_proxy(); }; sl_reply_error(); } } route[2] { if (!search("^Contact: [ ]*\*") && nat_uac_test("3")) { xlog("L_NOTICE", "*** found NAT (2) !\n"); if (nat_uac_test("1")) { xlog("L_NOTICE", " --> 1\n"); } if (nat_uac_test("2")) { xlog("L_NOTICE", " --> 2\n"); } setflag(6); fix_nated_register(); force_rport(); } if (! radius_www_authorize("uu.net")) { www_challenge("uu.net", "0"); return; } consume_credentials(); if (!save("location")) { sl_reply_error(); } return; } route[3] { if (src_ip == "62.191.185.147") { xlog("L_NOTICE", "*** from upstream proxy\n"); if (uri =~ "^sip:99") { xlog("L_NOTICE", "*** outbreak prefix from outside, reject\n"); sl_send_reply("484", "no pstn outbreak for you"); return; } } else { if (! radius_www_authorize("uu.net")) { www_challenge("uu.net", "0"); return; }; consume_credentials(); if (nat_uac_test("3")) { xlog("L_NOTICE", "*** found NAT (3) !\n"); setflag(6); } append_rpid_hf(); if (uri=~"^sip:99") { xlog("L_NOTICE", "*** pstn outbreak call, uri: $ru\n"); strip(2); xlog("L_NOTICE", "*** stripped uri: $ru\n"); if (uri=~"^sip:[1-9]") { xlog("L_NOTICE", "*** local call\n"); prefix("+49231"); } else if (uri=~"^sip:0[1-9]") { xlog("L_NOTICE", "*** national call\n"); strip(1); prefix("+49"); } else if (uri=~"^sip:00[1-9]") { xlog("L_NOTICE", "*** international call\n"); strip(2); prefix("+"); } else { xlog("L_NOTICE", "*** something wrong\n"); sl_send_reply("488", "wrong telephone number"); return; } rewritehostport("62.191.185.147:5060"); route(4); route(1); return; } } xlog("L_NOTICE", "*** looking up ...\n"); if (!lookup("location")) { xlog("L_NOTICE", " --> not found\n"); sl_send_reply("404", "Not Found"); return; } xlog("L_NOTICE", " --> found\n"); route(4); route(1); return; } route[4] { if (isflagset(6)) { xlog("L_NOTICE", "*** handle NAT (1)\n"); force_rport(); fix_nated_contact(); force_rtp_proxy(); } return; } onreply_route[1] { xlog("L_NOTICE", "*** onreply_route\n"); if (isflagset(6) && status =~ "(180)|(183)|2[0-9][0-9]") { if (! search("^Content-Length:[ ]*0")) { xlog("L_NOTICE", "*** handle NAT (2)\n"); force_rtp_proxy(); } } if (nat_uac_test("1")) { fix_nated_contact(); xlog("L_NOTICE", "*** handle NAT (3)\n"); } return; }