Re: VoIP behind NAT and FreeBSD

2006-12-03 Thread Kurt Dethier

Marwan Sultan wrote:

First thanks for you all, for the cooperating,

 My setup is as follow,

 Router <-> vr0 FreeBSD fxp0 <-> Switch <-> Clients
 Two NICs attached,
  vr0 connected to the router (internet interface) has the static 
192.168.0.2
  fxp0 connected to the Switch connected to clients acting as DHCP 
192.168.182.1

  and clients are assigned 192.168.182.* ofcourse..

  kernel as you know configured for ipfw and NAT
  chillispot installed, and controlling the fxp0 device thro the DHCP
  assigning for clients the IPs. however chillispot is not an issue.

  This is the configuration,
  I think chillispot using pf rules. once a user will sign in, all 
blocks will be remmoved.

  just for the info,


Hi Marwan,
I have never used ipfw before, so I suggest to do a quick check what the
NAT type is. Last time I checked, there was a simple client in the 
vovidia stun implementation. They also run a public server for testing.


If your NAT type is not symmetric NAT, you can use STUN (you will need
2 ip addresses on the internet side of your gateway for STUN to work).

If your NAT type is symmetric NAT, I suggest to look at UPNP. Most 
clients support it.
If UPNP is not an options, I guess proxying the media streams, or 
rewriting the signaling is your only options left.


Kurt


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VoIP behind NAT and FreeBSD

2006-12-02 Thread Marwan Sultan

First thanks for you all, for the cooperating,

 My setup is as follow,

 Router <-> vr0 FreeBSD fxp0 <-> Switch <-> Clients
 Two NICs attached,
  vr0 connected to the router (internet interface) has the static 
192.168.0.2
  fxp0 connected to the Switch connected to clients acting as DHCP 
192.168.182.1

  and clients are assigned 192.168.182.* ofcourse..

  kernel as you know configured for ipfw and NAT
  chillispot installed, and controlling the fxp0 device thro the DHCP
  assigning for clients the IPs. however chillispot is not an issue.

  This is the configuration,
  I think chillispot using pf rules. once a user will sign in, all blocks 
will be remmoved.

  just for the info,

  Any I appreciate your help gurus,
  Any advices how to setup?

  Marwan Sultan



Hi all,
It is very possible to use VOIP behind a symmetric NAT, but STUN is not
going to be any help. Depending on the setup and clients I have
implemented a number of solutions over the past years.
Unfortunately I haven't found a single solutions that always works.


_
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VoIP behind NAT and FreeBSD

2006-12-02 Thread Garrett Cooper

Kurt Dethier wrote:

Derrick Edwards wrote:

On Saturday 02 December 2006 09:22, Joe Holden wrote:

Kurt Dethier wrote:

STUN will only work if you have the correct NAT implementation on
your gateway. If you are using pf, you get what the STUN RFC calls
a symmetric NAT. STUN will not help you in such an implementation.
I'm not sure how the other NAT solutions on FreeBSD are implemented.

If you need a solution for a symmetric NAT, you need something that
understands the signaling protocol and can add fw/nat rules on demand
on your gateway, or a media proxy (like TURN).

Kurt

 >>

It is entirely possible to use voip behnd symmetric nat, but it also
entirely depends on the setup, some more details will help.

Hi, I am not sure of your setup either, but I have Vongae working 
behind a FreeBSD Firewall/Router using PF with NAT. 


Hi all,
It is very possible to use VOIP behind a symmetric NAT, but STUN is not
going to be any help. Depending on the setup and clients I have
implemented a number of solutions over the past years.
Unfortunately I haven't found a single solutions that always works.

Kurt


Forgive me if I'm not understanding the issue properly, but don't you 
have port-forwarding setup on the FreeBSD box for the machine that you 
are trying to use VoIP with? It seems like the problem would *sort* or 
be that simple to solve, unless the VoIP setup uses a P2P type 
configuration where it picks multiple ports for listening and 
transferring data.


Maybe it's just my misunderstanding of VoIP..
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VoIP behind NAT and FreeBSD

2006-12-02 Thread Kurt Dethier

Derrick Edwards wrote:

On Saturday 02 December 2006 09:22, Joe Holden wrote:

Kurt Dethier wrote:

STUN will only work if you have the correct NAT implementation on
your gateway. If you are using pf, you get what the STUN RFC calls
a symmetric NAT. STUN will not help you in such an implementation.
I'm not sure how the other NAT solutions on FreeBSD are implemented.

If you need a solution for a symmetric NAT, you need something that
understands the signaling protocol and can add fw/nat rules on demand
on your gateway, or a media proxy (like TURN).

Kurt

>>

It is entirely possible to use voip behnd symmetric nat, but it also
entirely depends on the setup, some more details will help.

	Hi, 
I am not sure of your setup either, but I have Vongae working behind a FreeBSD 
Firewall/Router using PF with NAT. 


Hi all,
It is very possible to use VOIP behind a symmetric NAT, but STUN is not
going to be any help. Depending on the setup and clients I have
implemented a number of solutions over the past years.
Unfortunately I haven't found a single solutions that always works.

Kurt

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VoIP behind NAT and FreeBSD

2006-12-02 Thread Derrick Edwards
On Saturday 02 December 2006 09:22, Joe Holden wrote:
> Kurt Dethier wrote:
> > Marwan Sultan wrote:
> >> Hello All,
> >>
> >>  Well, maybe the subject says all,
> >>  Im running 6.1R acting as NAT, gateway ofcourse, hotspot.
> >>  I have many clients trying to use Vonage, motorola, VoIP devices and
> >>  and few more products.
> >>
> >>  The problem is as its described in some websites..
> >>  They can call, receive a call, hear the dailtone but no one can hear
> >> the other party.
> >>
> >>   After researching i found out there is a problem iusing FreeBSD NAT
> >> with voip protocols.
> >>
> >>   i have been advised to use STUN servers, (Simple Traversal of UDP
> >> through NATs.)
> >>   I found out there is net/stund port and its installed successufly!
> >>   but still lost.
> >>
> >>   Can someone kindly and please shade a light on howto
> >>   make voip behind NAT works in my FreeBSD ? im in trouble because of
> >> this.
> >
> > Hi Marwan,
> > STUN will only work if you have the correct NAT implementation on
> > your gateway. If you are using pf, you get what the STUN RFC calls
> > a symmetric NAT. STUN will not help you in such an implementation.
> > I'm not sure how the other NAT solutions on FreeBSD are implemented.
> >
> > If you need a solution for a symmetric NAT, you need something that
> > understands the signaling protocol and can add fw/nat rules on demand
> > on your gateway, or a media proxy (like TURN).
> >
> > Kurt
>
> It is entirely possible to use voip behnd symmetric nat, but it also
> entirely depends on the setup, some more details will help.
>
> Ta,
> Joe

Hi, 
I am not sure of your setup either, but I have Vongae working behind a FreeBSD 
Firewall/Router using PF with NAT. 

Vonage Traffic viewed via PFTOP.

udpOut 172.16.1.1:1  69.59.242.83:1   MULTIPLE:MULTIPLE
2688m48  18146  9967K

udpOut 172.16.1.1:10112  69.59.243.178:12044  MULTIPLE:MULTIPLE 
  
6133   3382 674816

udpOut 172.16.1.1:10113  69.59.243.178:12045SINGLE:NO_TRAFFIC   
  
56 2 14   2348

v/r
Derrick



> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VoIP behind NAT and FreeBSD

2006-12-02 Thread Joe Holden
Kurt Dethier wrote:
> Marwan Sultan wrote:
>> Hello All,
>>
>>  Well, maybe the subject says all,
>>  Im running 6.1R acting as NAT, gateway ofcourse, hotspot.
>>  I have many clients trying to use Vonage, motorola, VoIP devices and
>>  and few more products.
>>
>>  The problem is as its described in some websites..
>>  They can call, receive a call, hear the dailtone but no one can hear
>> the other party.
>>
>>   After researching i found out there is a problem iusing FreeBSD NAT
>> with voip protocols.
>>
>>   i have been advised to use STUN servers, (Simple Traversal of UDP
>> through NATs.)
>>   I found out there is net/stund port and its installed successufly!
>>   but still lost.
>>
>>   Can someone kindly and please shade a light on howto
>>   make voip behind NAT works in my FreeBSD ? im in trouble because of
>> this.
> 
> Hi Marwan,
> STUN will only work if you have the correct NAT implementation on
> your gateway. If you are using pf, you get what the STUN RFC calls
> a symmetric NAT. STUN will not help you in such an implementation.
> I'm not sure how the other NAT solutions on FreeBSD are implemented.
> 
> If you need a solution for a symmetric NAT, you need something that
> understands the signaling protocol and can add fw/nat rules on demand
> on your gateway, or a media proxy (like TURN).
> 
> Kurt

It is entirely possible to use voip behnd symmetric nat, but it also
entirely depends on the setup, some more details will help.

Ta,
Joe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VoIP behind NAT and FreeBSD

2006-12-02 Thread Kurt Dethier

Marwan Sultan wrote:

Hello All,

 Well, maybe the subject says all,
 Im running 6.1R acting as NAT, gateway ofcourse, hotspot.
 I have many clients trying to use Vonage, motorola, VoIP devices and
 and few more products.

 The problem is as its described in some websites..
 They can call, receive a call, hear the dailtone but no one can hear 
the other party.


  After researching i found out there is a problem iusing FreeBSD NAT 
with voip protocols.


  i have been advised to use STUN servers, (Simple Traversal of UDP 
through NATs.)

  I found out there is net/stund port and its installed successufly!
  but still lost.

  Can someone kindly and please shade a light on howto
  make voip behind NAT works in my FreeBSD ? im in trouble because of this.


Hi Marwan,
STUN will only work if you have the correct NAT implementation on
your gateway. If you are using pf, you get what the STUN RFC calls
a symmetric NAT. STUN will not help you in such an implementation.
I'm not sure how the other NAT solutions on FreeBSD are implemented.

If you need a solution for a symmetric NAT, you need something that
understands the signaling protocol and can add fw/nat rules on demand
on your gateway, or a media proxy (like TURN).

Kurt

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VoIP behind NAT and FreeBSD

2006-12-02 Thread Joe Holden
Marwan Sultan wrote:
> Hello All,
> 
>  Well, maybe the subject says all,
>  Im running 6.1R acting as NAT, gateway ofcourse, hotspot.
>  I have many clients trying to use Vonage, motorola, VoIP devices and
>  and few more products.
> 
>  The problem is as its described in some websites..
>  They can call, receive a call, hear the dailtone but no one can hear
> the other party.
> 
>   After researching i found out there is a problem iusing FreeBSD NAT
> with voip protocols.
> 
>   i have been advised to use STUN servers, (Simple Traversal of UDP
> through NATs.)
>   I found out there is net/stund port and its installed successufly!
>   but still lost.
> 
>   Can someone kindly and please shade a light on howto
>   make voip behind NAT works in my FreeBSD ? im in trouble because of this.
> 
>   Thank you.
>   Marwan Sultan,
> 
This isn't FreeBSD NAT specific, its a problem with NAT in general, if
you've installed the stund port, all you need todo is run: stund -h
1.2.3.4 -a 1.2.3.4, replacing 1.2.3.4 with the machines ip obviously,
and then tell the voip phones to use that stun server.

HTH,
Joe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


VoIP behind NAT and FreeBSD

2006-12-02 Thread Marwan Sultan

Hello All,

 Well, maybe the subject says all,
 Im running 6.1R acting as NAT, gateway ofcourse, hotspot.
 I have many clients trying to use Vonage, motorola, VoIP devices and
 and few more products.

 The problem is as its described in some websites..
 They can call, receive a call, hear the dailtone but no one can hear the 
other party.


  After researching i found out there is a problem iusing FreeBSD NAT with 
voip protocols.


  i have been advised to use STUN servers, (Simple Traversal of UDP through 
NATs.)

  I found out there is net/stund port and its installed successufly!
  but still lost.

  Can someone kindly and please shade a light on howto
  make voip behind NAT works in my FreeBSD ? im in trouble because of this.

  Thank you.
  Marwan Sultan,

_
FREE pop-up blocking with the new MSN Toolbar - get it now! 
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"