RE: [Users] SER as proxy in front of Asterisk - sr-users

3 Jan 2007

      Hi,
In fact, now, every phone does not response.
The options didn't go thought the FW, so, the phone cannot answer.
I don't understand why the traffic don't go thought it !!
I have test this configuration with two firewall: a sonicwall and a soho.
Cheers,
Thomas
-----Message d'origine-----
De : Daniel-Constantin Mierla [mailto:daniel@voice-system.ro] 
Envoyé : mercredi, 3. janvier 2007 14:52
À : Thomas Deillon
Cc : users@openser.org
Objet : Re: [Users] SER as proxy in front of Asterisk
Hello,
what is the type of NAT/Firewall you have in front of Thomson? As I can 
see from the diagram, the phone does not reply to OPTIONS request, and I 
guess, the nat/firewall needs outward traffic to keep the pinhole open. 
Check why thomson ignores the options requests.
Cheers,
Daniel
On 01/03/07 15:17, Thomas Deillon wrote:
...
Hi,
I have made more tries and now, all my phones don't work ...
The firewall opens a connection to REGISTER phone but after a while 
the OPTION message from the Asterisk will be DROP by the FW ...
You can find a diagram of the exchange here: 
http://deillon.eu/tmp/exchange_sip.png
A list of all exchange: http://deillon.eu/tmp/ip_sip.txt
And all sip message: http://deillon.eu/tmp/message.txt
Thanks a lot for your help,
Thomas

*De :* users-bounces@openser.org [mailto:users-bounces@openser.org] 
*De la part de* Thomas Deillon
*Envoyé :* mardi, 2. janvier 2007 11:44
*À :* users@openser.org
*Objet :* [Users] SER as proxy in front of Asterisk
Hi all,
I wish you first a happy new year !!
One again, I ask you some help. Thanks a lot for your patience and 
your answers that really helped me.
So, I want to put a SER in front of one Asterisk for the moment (more 
after).
All Servers have public IP address and so, I don't care about the 
RTP/SDP messages.
All phones are behind NAT somewhere in Switerland :)
I have the configuration below in openser:
modparam("dispatcher", "list_file", "/etc/openser/dispatcher.list")
#modparam("dispatcher", "force_dst", 1)
modparam("dispatcher", "flags", 2)
modparam("usrloc", "db_mode", 0)
#modparam("rr", "enable_full_lr", 1)
route{
xlog("L_ALERT", "[$rm] from [$fu] to [$tu]\n");
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
exit;
};
if (msg:len >= 2048 ) {
sl_send_reply("513", "Message too big");
exit;
};
# if (search("User-Agent:.*Thomson.*")) {
# };
if ((src_ip==212.xxx.xxx.152) || (src_ip==212.xxx.xxx.153)) {
if(method=="OPTIONS") {
};
avp_pushto("$ru","$tu");
forward();
}else {
fix_nated_contact();
force_rport();
if(method=="REGISTER"){
ds_select_dst("4", "0");
t_relay();
}
else {
ds_select_dst("0", "4");
forward();
}
}
}
And in my dispatcher.list I have:
0 sip:212.xxx.xxx.153:5060
4 sip:212.xxx.xxx.153:5060
With this configuration, a snom phone, a X-lite phone and a Cisco 
phone seams to work ....
But with the Thomson ST2030, it doesn't work.
In fact, the Thomson REGISTER on asterisk, the Asterisk send a OPTION 
message to the FW IP adress and the right port where the thomson is 
and then, after a while, the FW close the connection. The thomson 
phone is so "UNREACHABLE" on asterisk status and nobody can call it.
I'm not sure that my configuration is ok in ser but I think that is a 
problem with the Thomson2030. Do you had the same kind of problem or 
do you understand the problem here ?
Thanks for your help,
Thomas Deillon

Users mailing list
Users@openser.org
http://openser.org/cgi-bin/mailman/listinfo/users