NONSENSE

Benjamin on Asterisk Mailing Lists wrote:

On Thu, 28 Oct 2004 14:45:46 -0600, Ryan Courtnage <[EMAIL PROTECTED]> wrote:


Yep, you can do this, just requires some port forwarding and special
considerations in sip.conf.



You are missing the point. There is no *solution* to SIP NAT traversal. All there is are *workarounds*, otherwise known as bad and rather dangerous hacks. Whether it works or not is highly dependent on external factors that you don't usually control. It also depends on the type of NAT/PAT your router is using, ie the router's particular NAT/PAT implementation.

The fact remains that SIP NAT traversal setups are highly insecure and
unreliable. Consider this to be the equivalent of locking your
apartment with duct tape. It may work for you, but you wouldn't
recommend it to anyone else UNLESS you wish them harm.

Now, this is valid for single NAT situations and it is even more valid
for double NAT situations.

If you want to do this properly without duct tape, then you will have
the three choices I mentioned:

- If you must use SIP, don't use NAT
- If you must use NAT, use IAX
- If you must use both SIP and NAT, build a tunnel

Anything else is improper and unprofessional.

rgds
benjk


_______________________________________________
Asterisk-Users mailing list
[EMAIL PROTECTED]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to