New subject: [Users] SER as proxy in front of Asterisk

4 Jan 2007

Behind a PIX, it works
Behind a SonicWall without the SIP_aware option, it doesn't work
Behind a Watchguard, it doesn't work too (and there is no SIP_aware option)

In fact, I have a centrex IP and many clients in the country with, many different
configurations and I have to be sure that all works. It's why I have no enable the
SIP_aware option in the sonicwall.

Thanks for your help,

Thomas 

-----Message d'origine-----
De : users-bounces(a)openser.org [mailto:users-bounces@openser.org] De la part de Thomas
Deillon
Envoyé : mercredi, 3. janvier 2007 17:06
À : daniel(a)voice-system.ro
Cc : users(a)openser.org
Objet : RE: [Users] SER as proxy in front of Asterisk

Hi,

In fact, now, every phone does not response.
The options didn't go thought the FW, so, the phone cannot answer.
I don't understand why the traffic don't go thought it !!
I have test this configuration with two firewall: a sonicwall and a soho.

Cheers,

Thomas 

-----Message d'origine-----
De : Daniel-Constantin Mierla [mailto:daniel@voice-system.ro] 
Envoyé : mercredi, 3. janvier 2007 14:52
À : Thomas Deillon
Cc : users(a)openser.org
Objet : Re: [Users] SER as proxy in front of Asterisk

Hello,

what is the type of NAT/Firewall you have in front of Thomson? As I can 
see from the diagram, the phone does not reply to OPTIONS request, and I 
guess, the nat/firewall needs outward traffic to keep the pinhole open. 
Check why thomson ignores the options requests.

Cheers,
Daniel

On 01/03/07 15:17, Thomas Deillon wrote:
...

 Hi,

 I have made more tries and now, all my phones don't work ...

 The firewall opens a connection to REGISTER phone but after a while 
 the OPTION message from the Asterisk will be DROP by the FW ...

 You can find a diagram of the exchange here: 
 http://deillon.eu/tmp/exchange_sip.png

 A list of all exchange: http://deillon.eu/tmp/ip_sip.txt

 And all sip message: http://deillon.eu/tmp/message.txt

 Thanks a lot for your help,

 Thomas

 ------------------------------------------------------------------------

 *De :* users-bounces(a)openser.org [mailto:users-bounces@openser.org] 
 *De la part de* Thomas Deillon
 *Envoyé :* mardi, 2. janvier 2007 11:44
 *À :* users(a)openser.org
 *Objet :* [Users] SER as proxy in front of Asterisk

 Hi all,

 I wish you first a happy new year !!
 One again, I ask you some help. Thanks a lot for your patience and 
 your answers that really helped me.

 So, I want to put a SER in front of one Asterisk for the moment (more 
 after).
 All Servers have public IP address and so, I don't care about the 
 RTP/SDP messages.
 All phones are behind NAT somewhere in Switerland :)

 I have the configuration below in openser:

 modparam("dispatcher", "list_file",
"/etc/openser/dispatcher.list")
 #modparam("dispatcher", "force_dst", 1)
 modparam("dispatcher", "flags", 2)

 modparam("usrloc", "db_mode", 0)
 #modparam("rr", "enable_full_lr", 1)

 route{

 xlog("L_ALERT", "[$rm] from [$fu] to [$tu]\n");

 if (!mf_process_maxfwd_header("10")) {
 sl_send_reply("483","Too Many Hops");
 exit;
 };

 if (msg:len >= 2048 ) {
 sl_send_reply("513", "Message too big");
 exit;
 };

 # if (search("User-Agent:.*Thomson.*")) {
 # };

 if ((src_ip==212.xxx.xxx.152) || (src_ip==212.xxx.xxx.153)) {
 if(method=="OPTIONS") {
 };
 avp_pushto("$ru","$tu");
 forward();

 }else {
 fix_nated_contact();
 force_rport();
 if(method=="REGISTER"){
 ds_select_dst("4", "0");
 t_relay();
 }
 else {
 ds_select_dst("0", "4");
 forward();
 }
 }
 }

 And in my dispatcher.list I have:

 0 sip:212.xxx.xxx.153:5060
 4 sip:212.xxx.xxx.153:5060

 With this configuration, a snom phone, a X-lite phone and a Cisco 
 phone seams to work ....
 But with the Thomson ST2030, it doesn't work.
 In fact, the Thomson REGISTER on asterisk, the Asterisk send a OPTION 
 message to the FW IP adress and the right port where the thomson is 
 and then, after a while, the FW close the connection. The thomson 
 phone is so "UNREACHABLE" on asterisk status and nobody can call it.
 I'm not sure that my configuration is ok in ser but I think that is a 
 problem with the Thomson2030. Do you had the same kind of problem or 
 do you understand the problem here ?

 Thanks for your help,

 Thomas Deillon

 ------------------------------------------------------------------------

 _______________________________________________
 Users mailing list
 Users(a)openser.org
 http://openser.org/cgi-bin/mailman/listinfo/users

_______________________________________________
Users mailing list
Users(a)openser.org
http://openser.org/cgi-bin/mailman/listinfo/users