Re: ASTERISK BOX behind a filewall

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 9/12/07, Indunil Jayasooriya <indunil75@xxxxxxxxx> wrote:
> Hi All,
>
> I want to put a ASTERISK BOX bend a Firewall. So I have given below rules.
>
>
> iptables -A FORWARD -p udp -d 192.168.101.30 -m multiport --dports
> 3478,4569,5060 -m state --state NEW -j ACCEPT
> iptables -A FORWARD -p udp -d 192.168.101.30 --dport 10000:20000 -m state
> --state NEW -j ACCEPT
>
> iptables -t nat -A PREROUTING -p udp -i eth0 -d 1.2.3.4 -m multiport
> --dports 3478,4569,5060 -j DNAT --to-destination
>  192.168.101.30
> iptables -t nat -A PREROUTING -p udp -i eth0 -d 1.2.3.4 --dport 10000:20000
> -j DNAT --to-destination 192.168.101.30
>
> pls assume 1.2.3.4 is the ip that connects to the internet.
>
>
> I use Xlite sotphone to talk. I can register. it says user ready. I can dial
> extentions as well. But , WHEN I talk , Both parties can not hear anyrhing.
>

It doesnt seems (to me) to be fault of iptables, but are you
"snatting" that pc with address "1.2.3.4" ?
If you aren't, perhaps its that. If its not that, i think you should
check your sip.conf for externip, localnetwork, canreinvite and those
things(or something similar, i dont remember now how that options are
written).

Hope it helps

Thanks,
Rodrigo
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux