Hi guys,

I have some problems with ser. When trying to call from internal ip (nat) I can hear

user that is behind nat but he can't hear me. Same problem exist when to users behind

nat call each other. The main problem comes when I forward calls - all calls starting

with 1-9 are forwarded to pstn provider (quintum gw). Whatever - internal or external

ip is used I cannot hear user at the other side but he hears me!

Here is my configuration:

debug=9 # debug level (cmd line: -dddddddddd)
#fork=yes
log_stderror=yes # (cmd line: -E)

check_via=no # (cmd. line: -v)
dns=yes # (cmd. line: -r)
rev_dns=yes # (cmd. line: -R)
port=5060
children=4
fifo="/tmp/ser_fifo"
fifo_mode=0777
# ------------------ module loading ----------------------------------

# Uncomment this if you want to use SQL database
loadmodule "/usr/local/lib/ser/modules/mysql.so"

loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
loadmodule "/usr/local/lib/ser/modules/rr.so"
loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
loadmodule "/usr/local/lib/ser/modules/usrloc.so"
loadmodule "/usr/local/lib/ser/modules/registrar.so"
loadmodule "/usr/local/lib/ser/modules/auth.so"
loadmodule "/usr/local/lib/ser/modules/auth_db.so"
loadmodule "/usr/local/lib/ser/modules/textops.so"
loadmodule "/usr/local/lib/ser/modules/domain.so"
#loadmodule "/usr/local/lib/ser/modules/mediaproxy.so"
loadmodule "/usr/local/lib/ser/modules/acc.so"
loadmodule "/usr/local/lib/ser/modules/msilo.so"
loadmodule "/usr/local/lib/ser/modules/nathelper.so"
# ----------------- setting module-specific parameters ---------------

# -- usrloc params --
modparam("usrloc", "db_mode", 2)
modparam("usrloc", "db_url", "mysql://ser:heslo@192.168.2.15/ser")
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")
modparam("rr", "enable_full_lr", 1)
modparam("acc", "db_url", "mysql://ser:heslo@192.168.2.15/ser")
modparam("acc", "log_level", 2)
modparam("acc", "log_flag", 3)
modparam("acc", "log_level", 1)
# number of flag, which will be used for accounting; if a message is
# labeled with this flag, its completion status will be reported
modparam("acc", "log_flag", 1)
modparam("acc", "log_fmt", "cdfimorstup")
modparam("acc", "db_url", "mysql://ser:heslo@192.168.2.15/ser")
modparam("acc", "db_flag", 1)
modparam("acc", "log_missed_flag", 1)
modparam("msilo", "db_url", "mysql://ser:heslo@80.72.68.187/ser")
modparam("msilo", "db_table", "silo")
#modparam("msilo", "registrar", "sip:registrar@iptel.org")
modparam("msilo", "expire_time", 259200)
modparam("msilo", "check_time", 10)
#modparam("msilo", "clean_period", "3")
modparam("msilo", "use_contact", 1)
#modparam("rtpproxy", "rtpproxy_socket", "/var/run/rtpproxy.sock")
#modparam("nathelper", "rtpproxy_socket", "/var/run/rtpproxy.sock")
modparam("nathelper","rtpproxy_sock", "/var/run/rtpproxy.sock")
modparam("registrar", "nat_flag", 6)
modparam("nathelper", "natping_interval", 30) # Ping interval 30 s
modparam("nathelper", "ping_nated_only", 1)

listen=83.74.45.87
# ------------------------- request routing logic -------------------
# main routing logic
route{
if (!mf_process_maxfwd_header("70")) {
  sl_send_reply("483","Too Many Hops");
  break;
};
if ( msg:len > max_len ) {
  sl_send_reply("513", "Message too big");
  break;
};
record_route();
if (loose_route()) {
  t_relay();
  break;
};

        if (nat_uac_test("3")) {
                # Allow RR-ed requests, as there may indicate that
                # a NAT-enabled proxy takes care of it; unless it is
                # a REGISTER
                if (method == "REGISTER" || ! search("^Record-Route:")) {
                        log("LOG: Someone trying to register from private IP, rewriting\n");
                        fix_nated_contact(); # Rewrite contact with source IP of signalling
                        if (method == "INVITE") {
                                fix_nated_sdp("1"); # Add direction=active to SDP
                        };
                        force_rport(); # Add rport parameter to topmost Via
                        setflag(6);     # Mark as NATed
                };
        };

if (uri==myself) {
  if (method=="REGISTER") {
                       if (!www_authorize("83.74.45.87", "subscriber")) {
                               www_challenge("83.74.45.87", "0");
    break;
   };
   force_rtp_proxy();
   save("aliases");
   save("location");
                      if (m_dump())
                            {
                                log("MSILO: offline messages dumped - if they were\n");
                            }else{
                                log("MSILO: no offline messages dumped\n");
                            };
   break;
  };
};

if (uri=~"^sip:[1-9]*@83.74.45.87") {
               rewritehost("122.44.75.176");
               forward( 122.44.75.176, 5060 );

               break;
       }
setflag(1);
  lookup("aliases");

        if (uri==myself) {
                if (method=="INVITE") {
                        record_route();
                        if (isflagset(6)) {
                                force_rtp_proxy();
                        };
                };
};

        if(!lookup("location"))
        {
            if (! t_newtran())
               {
                sl_reply_error();
                break;
               };
            if (!method=="MESSAGE")
            {
                if (!t_reply("404", "Not found"))
                {
                    sl_reply_error();
                };
                break;
            };
            log("MESSAGE received -> storing using MSILO\n");
            if (m_store("0"))
            {
                log("MSILO: offline message stored\n");
                if (!t_reply("202", "Accepted"))
                {
                    sl_reply_error();
                };
            }else{
                log("MSILO: offline message NOT stored\n");
                if (!t_reply("503", "Service Unavailable"))
                {
                    sl_reply_error();
                };
            };
            break;
        };

if (!t_relay()) {
sl_reply_error();
};

}
#route[1] {
# if (!t_relay()) {
# sl_reply_error();
# };
#}

route[1] {
        if (uri=~"[@:](192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[0-1])\.)" && !search("^Route:")){
                sl_send_reply("479", "We don't forward to private IP addresses");
                break;
        };

        if (isflagset(6)) {
                force_rtp_proxy();
                t_on_reply("1");
                append_hf("P-Behind-NAT: Yes\r\n");
        };

        # send it out now; use stateful forwarding as it works reliably
        # even for UDP2TCP
        if (!t_relay()) {
                sl_reply_error();
                break;
        };
}

onreply_route[1] {
        # NATed transaction ?
        if (status =~ "(183)|2[0-9][0-9]") {
                fix_nated_contact();
                force_rtp_proxy();
        # otherwise, is it a transaction behind a NAT and we did not
        # know at time or request processing ? (RFC1918 contacts)
        } else if (nat_uac_test("1")) {
                fix_nated_contact();
        };
}

failure_route[1] {
    # forwarding failed -- check if the request was a MESSAGE
    if (!method=="MESSAGE")
    {
        break;
    };

    log(1,"MSILO:the downstream UA doesn't support MESSAGEs\n");
    # we have changed the R-URI with the contact address, ignore it now
    if (m_store("1"))
    {
        log("MSILO: offline message stored\n");
        t_reply("202", "Accepted");
    }else{
        log("MSILO: offline message NOT stored\n");
        t_reply("503", "Service Unavailable");
    };

}

Thanks in advance :)

Pavel