Hello,
First of all, I'm spanish and my english isn't good, so please excuse my mistakes. I've been working with openser for a year. Now I'm modifying my SIP service in order to allow clients in NAT scenarios. I've read about symmetric / full cone / ... and other NAT scenarios. I've read about mediaproxy / rtpproxy and nathelper modules. I've got a openser.cfg working properly without NAT clients. And I've modified it (see attach).
Client X-Lite: IP: 192.168.1.2 (public address 81.39.220.5) Listen SIP port: 5060 Listen RTP port: 8000
Server: Openser 1.0 with Media Proxy IP: 147.83.197.39 Config in opernser.cfg
If i try to register with a UAC (X-Lite or K-Phone) with symmetric NAT scenario. Opernser server doesn't answer the client to 5060 port, as i need. X-Lite Diagnostic LOG is client_messages.txt Client timed out without receiving any server messages.
This is a tcpdump on clients side: 17:42:23.458980 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448 17:42:23.558019 IP 147.83.197.39.5060 > 192.168.1.2.10145: SIP, length: 538 17:42:23.558077 IP 192.168.1.2 > 147.83.197.39: ICMP 192.168.1.2 udp port 10145 unreachable, length 556 17:42:25.085485 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448 17:42:28.108960 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448 17:42:32.643903 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 2 17:42:34.156151 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
On the server this is the tcpdump: 17:42:23.904035 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448 17:42:23.904261 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538 17:42:23.905028 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680 17:42:24.004623 IP 81.39.220.5 > 147.83.197.39: ICMP 81.39.220.5 udp port 10145 unreachable, length 556 17:42:25.525470 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448 17:42:25.525607 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538 17:42:25.526314 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680 17:42:28.549322 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448
What's wrong?
It's necessary to use a STUN server? Why can't register? Why openser doesn't reply to 5060 port? My client it's only reachable in this. Can anyone help me? Anyone have a OpenSer config working?
Thanks in advance -- ------------------------------------- Aquel que planta árboles bajo los que sabe muy bien que nunca se sentara, ha descubierto el auténtico significado de la vida.
On Sat, 4 Feb 2006, Paco Orozco wrote:
Hello Paco,
Client X-Lite: IP: 192.168.1.2 (public address 81.39.220.5) Listen SIP port: 5060 Listen RTP port: 8000
Server: Openser 1.0 with Media Proxy IP: 147.83.197.39 Config in opernser.cfg
If i try to register with a UAC (X-Lite or K-Phone) with symmetric NAT scenario. Opernser server doesn't answer the client to 5060 port, as i need. X-Lite Diagnostic LOG is client_messages.txt Client timed out without receiving any server messages.
This is a tcpdump on clients side: 17:42:23.458980 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448 17:42:23.558019 IP 147.83.197.39.5060 > 192.168.1.2.10145: SIP, length: 538 17:42:23.558077 IP 192.168.1.2 > 147.83.197.39: ICMP 192.168.1.2 udp port 10145 unreachable, length 556 17:42:25.085485 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448 17:42:28.108960 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448 17:42:32.643903 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 2 17:42:34.156151 IP 192.168.1.2.5060 > 147.83.197.39.5060: SIP, length: 448
On the server this is the tcpdump: 17:42:23.904035 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448
You can see here that the NAT device is changing the source port from 5060 to 10145, which is the port used by Openser to send the reply. Openser is doing fine while your NAT device is doing wrong because it keeps the external rewriten source port when sending the packet to the internal side of the NAT (see the second line of the above tcpdump trace).
Which NAT device/router are you using?. Are you forwarding ports from the external to the internal side at the NAT device?.
Saludos JesusR.
17:42:23.904261 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538 17:42:23.905028 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680 17:42:24.004623 IP 81.39.220.5 > 147.83.197.39: ICMP 81.39.220.5 udp port 10145 unreachable, length 556 17:42:25.525470 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448 17:42:25.525607 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 538 17:42:25.526314 IP 147.83.197.39.5060 > 81.39.220.5.10145: SIP, length: 680 17:42:28.549322 IP 81.39.220.5.10145 > 147.83.197.39.5060: SIP, length: 448
What's wrong?
It's necessary to use a STUN server? Why can't register? Why openser doesn't reply to 5060 port? My client it's only reachable in this. Can anyone help me? Anyone have a OpenSer config working?
Thanks in advance
Aquel que planta árboles bajo los que sabe muy bien que nunca se sentara, ha descubierto el auténtico significado de la vida.
Saludos JesusR.
------------------------------- Jesus Rodriguez VozTelecom Sistemas, S.L. jesusr@voztele.com http://www.voztele.com Tel. 902360305 -------------------------------
-
Jesus Rodriguez -
Paco Orozco