Simon, The SIP clients are configured to interface with the private 192.168.0.X address on the firewall. The clients are all external to the firewall on the local LAN. I would have only expected NAT to have been performed if the SIP clients where attempting to access something external in the internet.
Jim "Simon Hobson" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Jim Duda wrote: > >>After reading this message, I did the following. >>Copied /usr/share/shorewall/modules to /etc/shorewall/modules. The >>one I have in /etc/shorewall was from an earlier >>3.2.x release. >>I manually added the four lines suggested in this thread. >>I restarted shorewall, and saw that the new kernel modules for sip >>and h323 were now loaded. >>I then realized that my asterisk application wasn't working. >>I removed the modules from shorewall. >>Asterisk still broken. >>I unloaded the kernel modules and restarted asterisk. >>Asterisk now functions again. >>When it was broken, the sip clients couldn't register for some reason. > > > Are your SIP clients configured to talk to the public or private > address on the firewall ? Are they internal or external to the > firewall ? > > I'm guessing that the SIP NAT module is looking inside the SIP > messages for IP addresses, and mangling these to match the NAT that > is being done - it looks like you have a situation where the result > is not correct. > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier. > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
