On 9/12/07, Indunil Jayasooriya <indunil75@xxxxxxxxx> wrote: > Hi All, > > I want to put a ASTERISK BOX bend a Firewall. So I have given below rules. > > > iptables -A FORWARD -p udp -d 192.168.101.30 -m multiport --dports > 3478,4569,5060 -m state --state NEW -j ACCEPT > iptables -A FORWARD -p udp -d 192.168.101.30 --dport 10000:20000 -m state > --state NEW -j ACCEPT > > iptables -t nat -A PREROUTING -p udp -i eth0 -d 1.2.3.4 -m multiport > --dports 3478,4569,5060 -j DNAT --to-destination > 192.168.101.30 > iptables -t nat -A PREROUTING -p udp -i eth0 -d 1.2.3.4 --dport 10000:20000 > -j DNAT --to-destination 192.168.101.30 > > pls assume 1.2.3.4 is the ip that connects to the internet. > > > I use Xlite sotphone to talk. I can register. it says user ready. I can dial > extentions as well. But , WHEN I talk , Both parties can not hear anyrhing. > It doesnt seems (to me) to be fault of iptables, but are you "snatting" that pc with address "1.2.3.4" ? If you aren't, perhaps its that. If its not that, i think you should check your sip.conf for externip, localnetwork, canreinvite and those things(or something similar, i dont remember now how that options are written). Hope it helps Thanks, Rodrigo _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc