4 Dec
2003
4 Dec
'03
9:33 p.m.
Yes...we tried down to about 10 seconds. No good though. I think the other
router was a D-Link 604. It failed too.
----- Original Message -----
From: "Andrei Pelinescu-Onciul" <pelinescu-onciul(a)fokus.fraunhofer.de>
To: "Ricardo Villa" <ricvil(a)epm.net.co>
Cc: "Klaus Darilion" <darilion(a)ict.tuwien.ac.at>at>; "Hans
Eriksson"
<hansa(a)mac.com>om>; <serusers(a)lists.iptel.org>
Sent: Thursday, December 04, 2003 3:27 PM
Subject: Re: [Serusers] symmetric nat/ broadband routers
On Dec 04, 2003 at 15:22, Ricardo Villa
<ricvil(a)epm.net.co> wrote:
> On our lab we have a RH7.3 box with iptables firewall and NAT. When we
were
> initially testing the nathelper module we found
out that external pings
did
> NOT keep the sessions alive on this box. Only
pings going from inside
> towards the internet. At that point we decided to simply rely on the
> ability of devices like the ATA186 and GS phones to send a SIP Dummy
packet
> from behind the NAT in order to keep the sessions
alive. So far this
> approach has worked 100%. It is possible that the Linux box just needed
> some tweaking, but we needed a solution that worked seamlessly with all
> customers.
>
> I belive we also tested another common broadband home router and it
behaved
the same way.
Did you try with smaller ping times?
My freebsd nat box work perfectly with nat ping interval set to 30s.
natping should keep the bindings alive also on any linux based nat (just
make sure the nat ping interval is greater then the defautl udp binding
expire time).
Andrei
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers