18 Nov
2004
18 Nov
'04
4:58 p.m.
Hi guys,
I have some problems with ser. When trying to call from internal ip (nat) I can hear
user that is behind nat but he can't hear me. Same problem exist when to users behind
nat call each other. The main problem comes when I forward calls - all calls starting
with 1-9 are forwarded to pstn provider (quintum gw). Whatever - internal or external
ip is used I cannot hear user at the other side but he hears me!
Here is my configuration:
debug=9 # debug level (cmd line: -dddddddddd)
#fork=yes
log_stderror=yes # (cmd line: -E)
check_via=no # (cmd. line: -v)
dns=yes # (cmd. line: -r)
rev_dns=yes # (cmd. line: -R)
port=5060
children=4
fifo="/tmp/ser_fifo"
fifo_mode=0777
# ------------------ module loading ----------------------------------
# Uncomment this if you want to use SQL database
loadmodule "/usr/local/lib/ser/modules/mysql.so"
loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
loadmodule "/usr/local/lib/ser/modules/rr.so"
loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
loadmodule "/usr/local/lib/ser/modules/usrloc.so"
loadmodule "/usr/local/lib/ser/modules/registrar.so"
loadmodule "/usr/local/lib/ser/modules/auth.so"
loadmodule "/usr/local/lib/ser/modules/auth_db.so"
loadmodule "/usr/local/lib/ser/modules/textops.so"
loadmodule "/usr/local/lib/ser/modules/domain.so"
#loadmodule "/usr/local/lib/ser/modules/mediaproxy.so"
loadmodule "/usr/local/lib/ser/modules/acc.so"
loadmodule "/usr/local/lib/ser/modules/msilo.so"
loadmodule "/usr/local/lib/ser/modules/nathelper.so"
# ----------------- setting module-specific parameters ---------------
# -- usrloc params --
modparam("usrloc", "db_mode", 2)
modparam("usrloc", "db_url",
"mysql://ser:heslo@192.168.2.15/ser")
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")
modparam("rr", "enable_full_lr", 1)
modparam("acc", "db_url",
"mysql://ser:heslo@192.168.2.15/ser")
modparam("acc", "log_level", 2)
modparam("acc", "log_flag", 3)
modparam("acc", "log_level", 1)
# number of flag, which will be used for accounting; if a message is
# labeled with this flag, its completion status will be reported
modparam("acc", "log_flag", 1)
modparam("acc", "log_fmt", "cdfimorstup")
modparam("acc", "db_url",
"mysql://ser:heslo@192.168.2.15/ser")
modparam("acc", "db_flag", 1)
modparam("acc", "log_missed_flag", 1)
modparam("msilo", "db_url",
"mysql://ser:heslo@80.72.68.187/ser")
modparam("msilo", "db_table", "silo")
#modparam("msilo", "registrar", "sip:registrar@iptel.org")
modparam("msilo", "expire_time", 259200)
modparam("msilo", "check_time", 10)
#modparam("msilo", "clean_period", "3")
modparam("msilo", "use_contact", 1)
#modparam("rtpproxy", "rtpproxy_socket",
"/var/run/rtpproxy.sock")
#modparam("nathelper", "rtpproxy_socket",
"/var/run/rtpproxy.sock")
modparam("nathelper","rtpproxy_sock",
"/var/run/rtpproxy.sock")
modparam("registrar", "nat_flag", 6)
modparam("nathelper", "natping_interval", 30) # Ping interval 30 s
modparam("nathelper", "ping_nated_only", 1)
listen=83.74.45.87
# ------------------------- request routing logic -------------------
# main routing logic
route{
if (!mf_process_maxfwd_header("70")) {
sl_send_reply("483","Too Many Hops");
break;
};
if ( msg:len > max_len ) {
sl_send_reply("513", "Message too big");
break;
};
record_route();
if (loose_route()) {
t_relay();
break;
};
if (nat_uac_test("3")) {
# Allow RR-ed requests, as there may indicate that
# a NAT-enabled proxy takes care of it; unless it is
# a REGISTER
if (method == "REGISTER" || !
search("^Record-Route:")) {
log("LOG: Someone trying to register from private IP,
rewriting\n");
fix_nated_contact(); # Rewrite contact with source IP of
signalling
if (method == "INVITE") {
fix_nated_sdp("1"); # Add direction=active to
SDP
};
force_rport(); # Add rport parameter to topmost Via
setflag(6); # Mark as NATed
};
};
if (uri==myself) {
if (method=="REGISTER") {
if (!www_authorize("83.74.45.87",
"subscriber")) {
www_challenge("83.74.45.87", "0");
break;
};
force_rtp_proxy();
save("aliases");
save("location");
if (m_dump())
{
log("MSILO: offline messages dumped - if they
were\n");
}else{
log("MSILO: no offline messages dumped\n");
};
break;
};
};
if (uri=~"^sip:[1-9]*@83.74.45.87") {
rewritehost("122.44.75.176");
forward( 122.44.75.176, 5060 );
break;
}
setflag(1);
lookup("aliases");
if (uri==myself) {
if (method=="INVITE") {
record_route();
if (isflagset(6)) {
force_rtp_proxy();
};
};
};
if(!lookup("location"))
{
if (! t_newtran())
{
sl_reply_error();
break;
};
if (!method=="MESSAGE")
{
if (!t_reply("404", "Not found"))
{
sl_reply_error();
};
break;
};
log("MESSAGE received -> storing using MSILO\n");
if (m_store("0"))
{
log("MSILO: offline message stored\n");
if (!t_reply("202", "Accepted"))
{
sl_reply_error();
};
}else{
log("MSILO: offline message NOT stored\n");
if (!t_reply("503", "Service Unavailable"))
{
sl_reply_error();
};
};
break;
};
if (!t_relay()) {
sl_reply_error();
};
}
#route[1] {
# if (!t_relay()) {
# sl_reply_error();
# };
#}
route[1] {
if (uri=~"[@:](192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[0-1])\.)"
&& !search("^Route:")){
sl_send_reply("479", "We don't forward to private IP
addresses");
break;
};
if (isflagset(6)) {
force_rtp_proxy();
t_on_reply("1");
append_hf("P-Behind-NAT: Yes\r\n");
};
# send it out now; use stateful forwarding as it works reliably
# even for UDP2TCP
if (!t_relay()) {
sl_reply_error();
break;
};
}
onreply_route[1] {
# NATed transaction ?
if (status =~ "(183)|2[0-9][0-9]") {
fix_nated_contact();
force_rtp_proxy();
# otherwise, is it a transaction behind a NAT and we did not
# know at time or request processing ? (RFC1918 contacts)
} else if (nat_uac_test("1")) {
fix_nated_contact();
};
}
failure_route[1] {
# forwarding failed -- check if the request was a MESSAGE
if (!method=="MESSAGE")
{
break;
};
log(1,"MSILO:the downstream UA doesn't support MESSAGEs\n");
# we have changed the R-URI with the contact address, ignore it now
if (m_store("1"))
{
log("MSILO: offline message stored\n");
t_reply("202", "Accepted");
}else{
log("MSILO: offline message NOT stored\n");
t_reply("503", "Service Unavailable");
};
}
Thanks in advance :)
Pavel