Good morning,
First, a little topology: Our sipXecs server is on a DMZ with the address 192.168.9.1/24. The firewall address on that DMZ (which is also the default route for the sipXecs server) is 192.168.9.254. We have a workstation on the firewall's protected network with the address 192.111.31.44/24 (we got an address allocation from IANA years ago before NAT was widespread.) Now the problem: We were using X-Lite on this workstation for a month or so, and decided to upgrade to eyeBeam for the extra features. When we try to place an outbound call with eyeBeam, the firewall reboots (which means that there is a problem with the firewall, since nothing should cause it to reboot, but that's another topic.) I did a Wireshark capture, and I saw that after eyeBeam sends the REGISTER, sipXecs sends a SUBSCRIBE back to the workstation that makes a couple references to 192.168.9.254. Later, in addition to sending a subscribe to the sipXecs server, eyeBeam sends a larger number of subscribe requests to the firewall address (192.168.9.254) Am I correct that something (eyeBeam, Firewall, and/or sipXecs) is doing something wrong here? If so, is this a problem with the way that the firewall is applying NAT, a problem with how sipXecs is dealing with NAT, or some other issue? Is the SUBSCRIBE that sipXecs sent back to the workstation responsible for eyeBeam's attempts to send SUBSCRIBES to the firewall address? 0000 00 16 35 a2 f8 22 00 90 fb 0d c0 fc 08 00 45 00 ..5..".. ......E. 0010 05 5a 82 c8 00 00 3f 11 4a 86 c0 a8 09 01 c0 6f .Z....?. J......o 0020 1f 2c 13 c4 dd bc 05 46 51 74 53 55 42 53 43 52 .,.....F QtSUBSCR 0030 49 42 45 20 73 69 70 3a 31 30 40 31 39 32 2e 31 IBE sip: 1...@192.1 0040 31 31 2e 33 31 2e 34 34 3a 35 36 37 36 34 3b 72 11.31.44 :56764;r 0050 69 6e 73 74 61 6e 63 65 3d 35 62 62 66 30 64 61 instance =5bbf0da 0060 39 62 36 35 61 33 34 62 31 3b 74 72 61 6e 73 70 9b65a34b 1;transp 0070 6f 72 74 3d 75 64 70 20 53 49 50 2f 32 2e 30 0d ort=udp SIP/2.0. 0080 0a 52 65 63 6f 72 64 2d 52 6f 75 74 65 3a 20 3c .Record- Route: < 0090 73 69 70 3a 31 39 32 2e 31 36 38 2e 39 2e 31 3a sip:192. 168.9.1: 00a0 35 30 36 30 3b 6c 72 3b 73 69 70 58 65 63 73 2d 5060;lr; sipXecs- 00b0 72 73 3d 25 32 41 61 75 74 68 25 37 45 2e 25 32 rs=%2Aau th%7E.%2 00c0 41 66 72 6f 6d 25 37 45 4d 6a 52 6a 4e 32 52 6c Afrom%7E MjRjN2Rl 00d0 59 54 4d 25 36 30 25 32 31 30 66 62 34 63 35 63 YTM%60%2 10fb4c5c 00e0 34 61 66 63 63 63 35 31 64 33 66 33 64 39 32 31 4afccc51 d3f3d921 00f0 63 62 62 62 36 66 31 33 64 3e 0d 0a 46 72 6f 6d cbbb6f13 d>..From 0100 3a 20 3c 73 69 70 3a 73 69 70 58 72 6c 73 40 31 : <sip:s ipx...@1 0110 39 32 2e 31 36 38 2e 39 2e 31 3a 35 32 36 34 34 92.168.9 .1:52644 0120 3e 3b 74 61 67 3d 32 34 63 37 64 65 61 33 0d 0a >;tag=24 c7dea3.. 0130 54 6f 3a 20 3c 73 69 70 3a 31 30 40 31 39 32 2e To: <sip :1...@192. 0140 31 36 38 2e 39 2e 32 35 34 3a 35 36 37 36 34 3b 168.9.25 4:56764; 0150 72 69 6e 73 74 61 6e 63 65 3d 35 62 62 66 30 64 rinstanc e=5bbf0d 0160 61 39 62 36 35 61 33 34 62 31 3b 74 72 61 6e 73 a9b65a34 b1;trans 0170 70 6f 72 74 3d 75 64 70 3b 78 2d 73 69 70 58 2d port=udp ;x-sipX- 0180 70 72 69 76 63 6f 6e 74 61 63 74 3d 31 39 32 2e privcont act=192. 0190 31 31 31 2e 33 31 2e 34 34 25 33 41 35 36 37 36 111.31.4 4%3A5676 01a0 34 25 33 42 74 72 61 6e 73 70 6f 72 74 25 33 44 4%3Btran sport%3D 01b0 75 64 70 3f 52 4f 55 54 45 3d 25 33 43 73 69 70 udp?ROUT E=%3Csip 01c0 25 33 41 31 39 32 2e 31 36 38 2e 39 2e 31 25 33 %3A192.1 68.9.1%3 01d0 41 35 30 36 30 25 33 42 73 69 70 58 2d 73 69 67 A5060%3B sipX-sig 01e0 25 33 44 61 32 35 35 65 38 31 37 63 36 66 65 66 %3Da255e 817c6fef 01f0 37 63 37 31 36 33 64 66 37 63 35 33 37 37 61 63 7c7163df 7c5377ac 0200 30 63 36 25 33 45 3e 0d 0a 43 61 6c 6c 2d 49 64 0c6%3E>. .Call-Id 0210 3a 20 73 2d 37 34 65 34 63 64 37 31 39 33 64 30 : s-74e4 cd7193d0 0220 31 64 33 33 2d 39 37 32 0d 0a 43 73 65 71 3a 20 1d33-972 ..Cseq: 0230 32 20 53 55 42 53 43 52 49 42 45 0d 0a 43 6f 6e 2 SUBSCR IBE..Con 0240 74 61 63 74 3a 20 3c 73 69 70 3a 31 39 32 2e 31 tact: <s ip:192.1 0250 36 38 2e 39 2e 31 3a 35 32 36 34 34 3b 74 72 61 68.9.1:5 2644;tra 0260 6e 73 70 6f 72 74 3d 75 64 70 3b 78 2d 73 69 70 nsport=u dp;x-sip 0270 58 2d 6e 6f 6e 61 74 3e 0d 0a 45 76 65 6e 74 3a X-nonat> ..Event: 0280 20 64 69 61 6c 6f 67 0d 0a 41 63 63 65 70 74 3a dialog. .Accept: 0290 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 64 69 61 applica tion/dia 02a0 6c 6f 67 2d 69 6e 66 6f 2b 78 6d 6c 0d 0a 45 78 log-info +xml..Ex 02b0 70 69 72 65 73 3a 20 32 36 36 33 0d 0a 44 61 74 pires: 2 663..Dat 02c0 65 3a 20 57 65 64 2c 20 31 30 20 46 65 62 20 32 e: Wed, 10 Feb 2 02d0 30 31 30 20 32 31 3a 32 31 3a 35 36 20 47 4d 54 010 21:2 1:56 GMT 02e0 0d 0a 4d 61 78 2d 46 6f 72 77 61 72 64 73 3a 20 ..Max-Fo rwards: 02f0 31 39 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 19..User -Agent: 0300 73 69 70 58 65 63 73 2f 34 2e 30 2e 34 20 73 69 sipXecs/ 4.0.4 si 0310 70 58 65 63 73 2f 72 6c 73 20 28 4c 69 6e 75 78 pXecs/rl s (Linux 0320 29 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 )..Accep t-Langua 0330 67 65 3a 20 65 6e 0d 0a 50 72 6f 78 79 2d 41 75 ge: en.. Proxy-Au 0340 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20 44 69 67 thorizat ion: Dig 0350 65 73 74 20 75 73 65 72 6e 61 6d 65 3d 22 7e 7e est user name="~~ 0360 69 64 7e 73 69 70 58 72 6c 73 22 2c 20 72 65 61 id~sipXr ls", rea 0370 6c 6d 3d 22 6c 79 6e 6b 2e 63 6f 6d 22 2c 20 6e lm="lynk .com", n 0380 6f 6e 63 65 3d 22 37 37 65 61 65 30 33 32 31 30 once="77 eae03210 0390 64 37 63 61 38 37 38 34 33 39 33 64 37 62 34 30 d7ca8784 393d7b40 03a0 37 66 39 37 63 32 34 62 37 33 32 33 37 34 22 2c 7f97c24b 732374", 03b0 20 75 72 69 3d 22 73 69 70 3a 31 30 40 31 39 32 uri="si p:1...@192 03c0 2e 31 36 38 2e 39 2e 32 35 34 3a 35 36 37 36 34 .168.9.2 54:56764 03d0 3b 72 69 6e 73 74 61 6e 63 65 3d 35 62 62 66 30 ;rinstan ce=5bbf0 03e0 64 61 39 62 36 35 61 33 34 62 31 3b 74 72 61 6e da9b65a3 4b1;tran 03f0 73 70 6f 72 74 3d 75 64 70 3b 78 2d 73 69 70 58 sport=ud p;x-sipX 0400 2d 70 72 69 76 63 6f 6e 74 61 63 74 3d 31 39 32 -privcon tact=192 0410 2e 31 31 31 2e 33 31 2e 34 34 25 33 41 35 36 37 .111.31. 44%3A567 0420 36 34 25 33 42 74 72 61 6e 73 70 6f 72 74 25 33 64%3Btra nsport%3 0430 44 75 64 70 22 2c 20 72 65 73 70 6f 6e 73 65 3d Dudp", r esponse= 0440 22 62 64 32 37 36 30 39 35 37 65 39 65 65 33 32 "bd27609 57e9ee32 0450 64 62 33 38 35 33 62 62 38 36 62 63 62 65 65 30 db3853bb 86bcbee0 0460 39 22 0d 0a 56 69 61 3a 20 53 49 50 2f 32 2e 30 9"..Via: SIP/2.0 0470 2f 55 44 50 20 31 39 32 2e 31 36 38 2e 39 2e 31 /UDP 192 .168.9.1 0480 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 2d ;branch= z9hG4bK- 0490 73 69 70 58 65 63 73 2d 38 62 35 31 37 32 33 64 sipXecs- 8b51723d 04a0 36 32 63 34 61 66 64 61 30 36 62 64 30 35 62 37 62c4afda 06bd05b7 04b0 62 66 35 62 39 30 39 31 38 34 38 62 0d 0a 56 69 bf5b9091 848b..Vi 04c0 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 31 a: SIP/2 .0/UDP 1 04d0 39 32 2e 31 36 38 2e 39 2e 31 3a 35 32 36 34 34 92.168.9 .1:52644 04e0 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 2d ;branch= z9hG4bK- 04f0 73 69 70 58 65 63 73 2d 64 36 37 38 33 66 31 64 sipXecs- d6783f1d 0500 64 30 34 62 64 38 31 30 33 36 64 37 63 31 61 36 d04bd810 36d7c1a6 0510 38 63 66 61 66 66 38 34 35 66 66 62 0d 0a 43 6f 8cfaff84 5ffb..Co 0520 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d ntent-Le ngth: 0. 0530 0a 58 2d 53 69 70 78 2d 4e 61 74 2d 52 6f 75 74 .X-Sipx- Nat-Rout 0540 65 3a 20 31 39 32 2e 31 36 38 2e 39 2e 32 35 34 e: 192.1 68.9.254 0550 3a 35 36 37 36 34 3b 74 72 61 6e 73 70 6f 72 74 :56764;t ransport 0560 3d 75 64 70 0d 0a 0d 0a =udp.... Mike Burden Lynk Systems, Inc e-mail: m...@lynk.com <mailto:m...@lynk.com> Phone: 616-532-4985
_______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
