-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi all...
I look through the list's archives, but an not finding info to help me.
The goal is use SER but not instaled in the GW/FW (it's not an acceptable option, well it's acceptable, but not for now). So I'm trying to put the SER in the Internal LAN (it could be installed in a DMZ also). So the question is if there is any proxy that could be putted on the GW/FW to handle incomming calls (INVITEs) and forward it correctly to the SER machine taken over the NAT issues?
I already look at SIProxd and RTProxy, but the first didn't forward incomming calls, and the second demands that it be instaled, with SER on the GW/FW. I also am looking at SERMediaProxy (RTProxy alternative) but the documentations aren't sufficient detailed to answer my question. Any help would be appreciated.
Edson.
#============================= f u cn rd ths, u cn gt a gd jb n cmptr prgrmmng.
SER can be put inside the private network, but you will have to configure your NAT to forward all the SIP traffic (port 5060) to the machine running SER.
In addition to that you would have to forward some port numbers for media to phones behind the NAT, for example 8000 -> IP of phone1, 8002 -> IP of phone 2, and so on.
Configuring ser for such operation is not easy, you would have to rewrite the contents of SIP messages.
In conclusion, it can be done, but it is not trivial. Run SER in the public internet if you can.
Jan.
On 29-01 00:36, Edson Gellert Schubert wrote:
Regarding this maybe I have something to say:
set up a dual eth server, dont waste 2 weeks messing with a firewall like me :(
one public address for ser and web interface (if you have), restricted by iptablesover certain ports one private for samba, ssh, sendmail and all other things
The public card connects before the firewall, the private with all other lan clients/server (I dont run a dmz)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Sure I'll... ;)
Edson.
- ----- Original Message ----- From: "Maxim Sobolev" sobomax@portaone.com To: "Edson Gellert Schubert" egschubert@ig.com.br Cc: "Lista SER - IPTEL" serusers@lists.iptel.org Sent: Thursday, January 29, 2004 11:13 AM Subject: Re: [Serusers] SER + Proxy + NAT
acceptable
option, well it's acceptable, but not for now). So I'm trying to put the
SER
in the Internal LAN (it could be installed in a DMZ also). So the
question
is if there is any proxy that could be putted on the GW/FW to handle incomming calls (INVITEs) and forward it correctly to the SER machine
taken
the
GW/FW. I also am looking at SERMediaProxy (RTProxy alternative) but the documentations aren't sufficient detailed to answer my question. Any
help
Is it possible to get a copy of your version ? I would gladly help out testing it.
- Atle
* Maxim Sobolev sobomax@portaone.com [040129 18:26]:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Oh, if You need any help in the debbuging/test process, let me know...
Edson.
- ----- Original Message ----- From: "Maxim Sobolev" sobomax@portaone.com To: "Edson Gellert Schubert" egschubert@ig.com.br Cc: "Lista SER - IPTEL" serusers@lists.iptel.org Sent: Thursday, January 29, 2004 11:13 AM Subject: Re: [Serusers] SER + Proxy + NAT
acceptable
option, well it's acceptable, but not for now). So I'm trying to put the
SER
in the Internal LAN (it could be installed in a DMZ also). So the
question
is if there is any proxy that could be putted on the GW/FW to handle incomming calls (INVITEs) and forward it correctly to the SER machine
taken
the
GW/FW. I also am looking at SERMediaProxy (RTProxy alternative) but the documentations aren't sufficient detailed to answer my question. Any
help
-
Alessio Focardi -
Atle Samuelsen -
Edson Gellert Schubert -
Jan Janak -
Maxim Sobolev