On Mon, Aug 23, 2010 at 8:37 PM, Nathan Eisenberg <[email protected]> wrote: > $natrules .= filter_nat_rules_generate_if($wanif, > > "{$lansa}/{$lancfg['subnet']}", 5060, "", 5060, > null, 5060, false); > > > > This line in /etc/inc/filter.inc breaks SIP behind NAT. It seems to exclude > 5060 from the outbound NAT rules. Why would you want to do that? Am I > misunderstanding what this does? Changing the ports to something else > immediately fixes native SIP functionality. >
At the time that was done (many years ago), not rewriting 5060 fixed things more often than it broke them. That's no longer the case, 2.0 does not do that by default. It is documented and intended behavior, but since changed. Enable advanced outbound NAT if you don't want that. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
