There is no external firewall, only shorewall iptables programming tool. In fact the sipx server has a public IP. The external ( also with a public IP ) devices have no NAT. They are simply connected over the internet. So there cannot be any NAT issue. sipx is simply unable to send the UDP answer (Operation not permitted). I am trying to use sipx via the sipfoundry-3.11.9-centos5-i386.iso development version because I will need the B2BUA feature not available in the stable release. Thanks for your help.
Tony Graziano ha scritto: > This won't work in the current stable version behind a firewall unless > your firewall is sip aware and your firewall also handles the remote > user for NAT traversal. It is slated to be an available option sith > sipXbridge in 3.11 (unstable/development version). > > If your UA/Phone and the sip proxy were on a network and had no firewall > between them it would work. Passing port 5060 through or doing a PAT > entry on a firewall would not work either because SIP media uses a > dynamic port range and is not really easy to firewall without a firewall > that understands SIP. > > Ingate makes a really handy device for just this need, and 4.0 is due > out to be stable within a couple of months. > > In the meantime, the wiki has a few articles on SIP and NAT. Mike > recently posted a "how-to" using a vyatta router as a firewall running > OSBC (Open Session Border Controller) running on a separate box too. > > What version of sipx are you trying to use? > > Tony > > >>> Paolo Prandini <[email protected]> 01/25/09 1:21 PM >>> > I am enable to register anything, no packet is being sent by sipXproxy, > every registration request is followed by the log entry ( debug level): > "2009-01-25T18:11:09.505480Z":50880:SIP:ERR:sipx1.spe.net:SipClientUdp-2008:B6AC6B90:SipXProxy:"OsDatagramSocket::write(4) > > 5 ipAddress = '43.211.64.68', port = 5060, bytesSent = -1, bufferLength > = 583, errno = 1 'Operation not permitted'" > The registration requests are received, but the answers cannot be sent. > I even tried disabling the firewall but no difference. > I also find in sipregistrar log ( debug level): > "2009-01-25T18:18:25.497589Z":96825:SIP:DEBUG:sipx1.spe.net:SipRegistrarServer:B6C6AB90:SipRegistrar:"SipClient[SipClientTcp-29]::isAcceptableForDestination > > matches 43.211.125.73:5060 but is not trusted" > "2009-01-25T18:18:25.497630Z":96826:SIP:DEBUG:sipx1.spe.net:SipRegistrarServer:B6C6AB90:SipRegistrar:"SipProtocolServerBase[SipTcpServer-6]::send > > SipClientTcp-30 (0x8dd3448), remote host: 43.211.125.73:5060 remote IP: > 83.211.125.73:5060 remote Via address: :-1 received address: :-1" > Could someone please help with this issue? > Thanks > Paolo > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users > Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users -- Dr.Ing.Paolo Prandini Dr.Paolo Prandini Rottendorfer Str. 1 A-9560 Lindl Austria Telefon +43 (0)42765105 Fax +43 (0)427637590 S.P.E.Sistemi e Progetti Elettronici s.a.s. Via Liguria 5 I-25125 Brescia Italia Telefono +39 0302427266 Fax +39 02700406565 Email [email protected] Web http://www.spe.net CA https://ra.spe.net/pub/cacert/cacert.crt ------------------------------------------- The information contained in this e-mail message is confidential and intended exclusively for the addressee. Persons receiving this e-mail message who are not the named addressee (or his/her co-workers, or persons authorized to take delivery) must not use, forward or reproduce its contents. If you have received this e-mail message by mistake, please contact us immediately and delete this e-mail message beyond retrieval. Die Information dieses e-Mails ist vertraulich und ausschliesslich fuer den Adressaten bestimmt. Der Empfanger dieses e-Mails, der nicht der Adressat ist, (sowie einer seiner Mitarbeiter oder seiner Empfangsberechtigter), darf den Inhalt nicht verwenden, weitergeben oder reproduzieren. Sollten Sie dieses e-Mail irrtuemlich erhalten haben, informieren Sie uns bitte unverzueglich und loeschen Sie das e-Mail unwiederbringlich. Questo messaggio contiene informazioni riservate e confidenziali. Se non siete i destinatari del messaggio (o se avete ricevuto il messaggio per errore) Vi preghiamo di darcene immediata comunicazione ritornandoci il messaggio stesso. Qualsiasi copia, riproduzione in genere, uso o distribuzione del materiale contenuto o allegato al presente messaggio รจ severamente proibito. _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
