Hello, On 05-05 10:17, Hans Scheffers wrote: Getting VoIP that blocks everything is a complex topic. There are several proposals available, none of them works in all situations, though (except Rosenberg's recent ICE draft). Basically, you can install ser in your NATed network and your SIP phones will be able to register. To make calls to the public internet your either must make your phones to put public IP address of the NAT box into SDP or you will have to use a ser module called nathelper which can mangle those IP addresses at the server. You will also probably need to set up portforwarding of port 5060 on your NAT box. So, as you see, it is not easy. It depends a lot on your phones. Do they support STUN ? Can they be preconfigured to put public IP of the NAT into SDP ? What phones do you have ? Jan.

On 06-05 07:54, Juha Heinanen wrote: And this is very tricky, that is the reason why there is no such helper application yet. Jan.

I am not aware of any. There was an attempt to write such an application for ipchains for 2.2.x kernels, but it was only partially implemented and never ported to 2.4.x iptables. Probably the easiest solution now is to get a phone with STUN support and set up port forwarding on the NAT box. Jan. On 06-05 11:36, Hans Scheffers wrote:

BTW, are you behind a NAT or just a firewall ? Jan. On 06-05 11:36, Hans Scheffers wrote:

Jan Janak writes: firewall is a firewall and if someone implements one, it also means that the implementer must support all protocols its users need to get through it. are you saying that implementing sip helper for iptables is more complicated than implementing sip support in firewalls like cisco pix, firewall one, nortel shasta, intertex, etc. that already have sip support. -- juha

On Tuesday 06 May 2003 12:13, Jan Janak wrote: I do not know the internals of pix etc. So it is hard to say for which platform it is more compilcated. AFAIK their is no SIP helper yet. And maybe it sounds hard, but i believe that their will be never one free available. The modules for ipchains was just a search and replacement of port numbers and IPs. And the netfilter team rejects to accept such a uncomplete module. They want a parser for SIP and SDP before they will accpet it as official part of netfilter. The hardest part for such a module is that it is not possible to resolve host names from the kernel space. And every UA is free to use DNS names or IPs in its SIP requests. Letting media trough the packet filter and connection tracking is also not easy but should be possible. Regards Nils Ohlmeier

Hello Greg, we have completed all major changes and will be testing the CVS code now, so it is good time to try to make postgres module stable with the current CVS version. So we will commit mostly bug fixes now and if everything goes well then the current version + bugfixes will be the new release. Let me know if you have any problems with the CVS version. Jan. On 06-05 08:29, Greg Fausak wrote: