On Wed, 2009-05-13 at 23:25 +0200, Michael Thalmann wrote:
> I have two sites connected via openvpn. Both routers are running  
> shorewall. Behind Network A is a SIP Phone which tries to register  
> with an Asterisk PBX in Network B.
> I see in the log of the SIP device, that it is sending SIP packets  
> with its internal assigned address 192.168.1.11. The router at Network  
> B logs these SIP packets coming from the external IP address of Router  
> A, and not 192.168.1.11.
> The strange thing is: other devices in net B have no trouble and are  
> not masqueraded in any way. Could that be a problem with udp vs. tcp?
> Any advice I can try?

My guess is that you have a netfilter sip helper on the router for
network A.  Try removing it and see if that helps.

This gets real tricky if you want the single gateway for network A to
both help sip packets destined for the wider Internet and also not help
packets destined for the other side of the VPN.

I don't know if you can have the sip helper work for only some
connections or not.

b.

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables 
unlimited royalty-free distribution of the report engine 
for externally facing server and web deployment. 
http://p.sf.net/sfu/businessobjects
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to