Re: [asterisk-users] Why does sip show peers show my router/gateway address as the client IP address?
On Sat, Dec 11, 2010 at 3:06 AM, Bruce B bruceb...@gmail.com wrote: Hi Everyone, I am using pfSense to do firewall and NAT on an Asterisk server. I have ports 5060 TCP/UDP and 10k-20k UDP forwarded to the Asterisk server local IP 192.168.5.5. However, when a user from outside using Linksys WRP400 ata connects to the Asterisk server and registers I see them as 192.168.1.1 in the sip show peers command. In face, all many different of the Linksys WRP400 show the same. It seems that pfsense does something to the packets that when they reach Asterisk it thinks they are sent from the Gateway rather than the actual endpoint hence the calls are not reaching the other side but registration is made. Any experience with this? Thanks Do you have the siproxd package installed on pfsense? It is suspossed to handle registrations from multiple phones behind NAT. In your case since the phones are external I would probably remove it if installed. I haven't needed siproxd. Also on Asterisk set externip to your static IP in sip.conf. Or if you don't have a static IP set externhost. You also need to configure localnet. Ryan -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Why does sip show peers show my router/gateway address as the client IP address?
Thanks for the feedback Ryan. Siproxd is not installed. I think Siproxd like you said just does the reverse meaning if phones are part of pfSense subnet then it connects to outside world. But in my case they are coming into Asterisk which is on pfSense subnet. I do have a static IP and it's set like: externip=34.34.34.34 localnet=192.168.5.0/255.255.255.0 Do you use pfSense for this same situation? Can you do a sip show peers and let me know if you actually see the outside public IP addresses for the clients? Also how is your outbound NAT setup? AON? Thanks On Sat, Dec 11, 2010 at 10:15 AM, Ryan Wagoner rswago...@gmail.com wrote: On Sat, Dec 11, 2010 at 3:06 AM, Bruce B bruceb...@gmail.com wrote: Hi Everyone, I am using pfSense to do firewall and NAT on an Asterisk server. I have ports 5060 TCP/UDP and 10k-20k UDP forwarded to the Asterisk server local IP 192.168.5.5. However, when a user from outside using Linksys WRP400 ata connects to the Asterisk server and registers I see them as 192.168.1.1 in the sip show peers command. In face, all many different of the Linksys WRP400 show the same. It seems that pfsense does something to the packets that when they reach Asterisk it thinks they are sent from the Gateway rather than the actual endpoint hence the calls are not reaching the other side but registration is made. Any experience with this? Thanks Do you have the siproxd package installed on pfsense? It is suspossed to handle registrations from multiple phones behind NAT. In your case since the phones are external I would probably remove it if installed. I haven't needed siproxd. Also on Asterisk set externip to your static IP in sip.conf. Or if you don't have a static IP set externhost. You also need to configure localnet. Ryan -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Why does sip show peers show my router/gateway address as the client IP address?
Hi Again, Here is what I see which is wrong for AddrIP and is fine for Reg. Contact parameter - In fact both parameters should show the public IP address: ** DTMFmode : rfc2833 Timer T1 : 500 Timer B : 32000 ToHost : Addr-IP : 192.168.0.1 Port 5060 Defaddr-IP : 0.0.0.0 Port 5060 Prim.Transp. : UDP Allowed.Trsp : UDP Def. Username: SIP Options : (none) Codecs : 0xe (gsm|ulaw|alaw) Codec Order : (ulaw:20,alaw:20,gsm:20) Auto-Framing : No 100 on REG : No Status : OK (14 ms) Useragent: Linksys/WRP400-1.01.00 Reg. Contact : sip:5...@45.45.45.45:5060 Qualify Freq : 6 ms Sess-Timers : Accept Sess-Refresh : uas Sess-Expires : 1800 secs Min-Sess : 90 secs ** Regards, Bruce On Sat, Dec 11, 2010 at 10:15 AM, Ryan Wagoner rswago...@gmail.com wrote: On Sat, Dec 11, 2010 at 3:06 AM, Bruce B bruceb...@gmail.com wrote: Hi Everyone, I am using pfSense to do firewall and NAT on an Asterisk server. I have ports 5060 TCP/UDP and 10k-20k UDP forwarded to the Asterisk server local IP 192.168.5.5. However, when a user from outside using Linksys WRP400 ata connects to the Asterisk server and registers I see them as 192.168.1.1 in the sip show peers command. In face, all many different of the Linksys WRP400 show the same. It seems that pfsense does something to the packets that when they reach Asterisk it thinks they are sent from the Gateway rather than the actual endpoint hence the calls are not reaching the other side but registration is made. Any experience with this? Thanks Do you have the siproxd package installed on pfsense? It is suspossed to handle registrations from multiple phones behind NAT. In your case since the phones are external I would probably remove it if installed. I haven't needed siproxd. Also on Asterisk set externip to your static IP in sip.conf. Or if you don't have a static IP set externhost. You also need to configure localnet. Ryan -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Why does sip show peers show my router/gateway address as the client IP address?
On Sat, Dec 11, 2010 at 11:45 AM, Bruce B bruceb...@gmail.com wrote: Thanks for the feedback Ryan. Siproxd is not installed. I think Siproxd like you said just does the reverse meaning if phones are part of pfSense subnet then it connects to outside world. But in my case they are coming into Asterisk which is on pfSense subnet. I do have a static IP and it's set like: externip=34.34.34.34 localnet=192.168.5.0/255.255.255.0 Do you use pfSense for this same situation? Can you do a sip show peers and let me know if you actually see the outside public IP addresses for the clients? Also how is your outbound NAT setup? AON? Thanks Yep I am using pfSense 1.2.3 with a static IP. I have port forwarded UDP SIP and the UDP RTP port range to the private IP of the Asterisk box. I have enabled manual outbound nat and configured the static port option. If you use the automatic outbound nat it will randomize the ports, which you don't want. My sip.conf looks like yours with the externip and localnet set. When I do sip show peers I see the external IP. Ryan -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Why does sip show peers show my router/gateway address as the client IP address?
Thanks for the confirmation. Do you have both LAN and WAN as outbound AON like this: WAN any * * * * * YES LAN any * * * * * YES ??? I am stumped as to why pfSense behaves like this in this instance. Thanks again. On Sat, Dec 11, 2010 at 12:34 PM, Ryan Wagoner rswago...@gmail.com wrote: On Sat, Dec 11, 2010 at 11:45 AM, Bruce B bruceb...@gmail.com wrote: Thanks for the feedback Ryan. Siproxd is not installed. I think Siproxd like you said just does the reverse meaning if phones are part of pfSense subnet then it connects to outside world. But in my case they are coming into Asterisk which is on pfSense subnet. I do have a static IP and it's set like: externip=34.34.34.34 localnet=192.168.5.0/255.255.255.0 Do you use pfSense for this same situation? Can you do a sip show peers and let me know if you actually see the outside public IP addresses for the clients? Also how is your outbound NAT setup? AON? Thanks Yep I am using pfSense 1.2.3 with a static IP. I have port forwarded UDP SIP and the UDP RTP port range to the private IP of the Asterisk box. I have enabled manual outbound nat and configured the static port option. If you use the automatic outbound nat it will randomize the ports, which you don't want. My sip.conf looks like yours with the externip and localnet set. When I do sip show peers I see the external IP. Ryan -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Why does sip show peers show my router/gateway address as the client IP address?
On Sat, Dec 11, 2010 at 1:04 PM, Bruce B bruceb...@gmail.com wrote: Thanks for the confirmation. Do you have both LAN and WAN as outbound AON like this: WAN any * * * * * YES LAN any * * * * * YES ??? I am stumped as to why pfSense behaves like this in this instance. Thanks again. You only want one outbound NAT if you only have WAN and LAN interfaces. Mine is WAN 192.168.1.0/24 * * * * * YES Replace 192.168.1.0/24 with your internal network range. Ryan -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
