[Ekiga-list] Message "Registration failed: Timeout"

Thu Nov 30 15:19:19 UTC 2006

I have problem with message "Registration failed: Timeout" after
I proceed standard first-time druid launch and every next ekiga stratup.
I have been registered at ekiga.net successfuly and I can login at its
web interface.
I have carefully read ekiga docs and faq but did not found the solution.
I googled out that possible source of problem may be I am behind two NATs
(and three packet-filters -including boxes of these NATs).

The first filter+NAT is an ADSL router Well PTI 845G.
The second filter+NAT is my gentoo-based router.
Third packet-filter runs on my gentoo desktop-box.

The first NAT translates between public address space and 10.*.*.* private space.
The second NAT translates between 10.*.*.* private space and 168.192.1.* space.

I am the only one who use SIP phone on both these private networks
and I only want to connect peers on the outer public network.

I use gentoo ekiga package: net-im/ekiga-2.0.3 USE="dbus debug gnome sdl -avahi -doc"  

I have checked that rp_filter value is set to "1" on both inner interface (eth0) and
outer interface (wlan0) of the gentoo-router box and also on the only interface of my
desktop-box (eth0). I also tried to set ip_conntrack_udp_timeout to 3600 on both of them,
but it did not help

I am running theese iptables settings:

on my desktop-box

# iptables -A INPUT -i lo -j ACCEPT
# iptables -P INPUT DROP
# iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
# iptables -A INPUT -i eth0 -p udp --dport 5000:5100 -j ACCEPT
# iptables -A INPUT -i eth0 -p icmp --icmp-type 0 -j ACCEPT
# iptables -A INPUT -i eth0 -p icmp --icmp-type 3 -j ACCEPT
# iptables -A INPUT -i eth0 -p icmp --icmp-type 8 -j ACCEPT
# iptables -A INPUT -i eth0 -p icmp --icmp-type 11 -j ACCEPT
# iptables -A INPUT -i eth0 -p tcp --dport 113 -j REJECT
# iptables -P OUTPUT ACCEPT

and
on my gentoo-router box:

# iptables -A INPUT -i lo -j ACCEPT
# iptables -A INPUT -i eth0 -j ACCEPT
# iptables -P INPUT DROP
# iptables -A INPUT -i wlan0 -m state --state ESTABLISHED,RELATED -j ACCEPT
# iptables -A INPUT -i wlan0 -p icmp --icmp-type 0 -j ACCEPT
# iptables -A INPUT -i wlan0 -p icmp --icmp-type 3 -j ACCEPT
# iptables -A INPUT -i wlan0 -p icmp --icmp-type 8 -j ACCEPT
# iptables -A INPUT -i wlan0 -p icmp --icmp-type 11 -j ACCEPT
# iptables -A INPUT -i wlan0 -p tcp --dport 113 -j REJECT
# iptables -P OUTPUT ACCEPT
# iptables -A FORWARD -i eth0 -j ACCEPT
# iptables -P FORWARD DROP
# iptables -A FORWARD -i wlan0 -m state --state ESTABLISHED,RELATED -j ACCEPT
# iptables -A FORWARD -i wlan0 -p udp --dport 5000:5100 -j ACCEPT
# iptables -A FORWARD -i wlan0 -p icmp --icmp-type 0 -j ACCEPT
# iptables -A FORWARD -i wlan0 -p icmp --icmp-type 3 -j ACCEPT
# iptables -A FORWARD -i wlan0 -p icmp --icmp-type 8 -j ACCEPT
# iptables -A FORWARD -i wlan0 -p icmp --icmp-type 11 -j ACCEPT
# iptables -A FORWARD -i wlan0 -p tcp --dport 113 -j REJECT
# iptables -t nat -I POSTROUTING -o wlan0 -j MASQUERADE

and
I have also set to allow 5000:5100 udp ports on my ADSL router (Well PTI 845G)

Note 1:
  accepting all types of ICMP did not help...

Note 2:
  Ekiga detects "Port restricted NAT", so I confirm STUN...
  If I set port forwarding on both NATs it did not help...
    only it detects "Cone NAT" instead of "Port restricted NAT"
    and no success with or without STUN enabled...

Note 3:
  I have also tried to add an "ekiga.net" account information
  manually to Accounts dialog, but I also see "Registration failed"
  in this dialog after few seconds.

Note 4:

  "ekiga -d 4" shows this:

    2006/11/30 11:25:05.983	  0:00.472	                  ekiga	Detected audio plugins: ALSA
    2006/11/30 11:25:05.984	  0:00.472	                  ekiga	Detected video plugins: Picture,V4L,V4L2
    2006/11/30 11:25:05.984	  0:00.472	                  ekiga	Detected audio plugins: ALSA
    2006/11/30 11:25:05.984	  0:00.472	                  ekiga	Detected video plugins: Picture,V4L,V4L2
    2006/11/30 11:25:06.000	  0:00.488	                  ekiga	Detected the following audio input devices: SB Live [Unknown],Default with plugin ALSA
    2006/11/30 11:25:06.000	  0:00.488	                  ekiga	Detected the following audio output devices: SB Live [Unknown],Default with plugin ALSA
    2006/11/30 11:25:06.000	  0:00.488	                  ekiga	Detected the following video input devices: StaticPicture,MovingLogo with plugin Picture
    2006/11/30 11:25:06.000	  0:00.488	                  ekiga	Detected the following audio input devices: SB Live [Unknown],Default with plugin ALSA
    2006/11/30 11:25:06.000	  0:00.488	                  ekiga	Detected the following audio output devices: SB Live [Unknown],Default with plugin ALSA
    2006/11/30 11:25:06.000	  0:00.489	                  ekiga	Detected the following video input devices: StaticPicture,MovingLogo with plugin Picture

    (ekiga:25369): gnome-vfs-modules-WARNING **: Could not initialize inotify

    2006/11/30 11:25:06.917	  0:01.406	                  ekiga	Ekiga version 2.0.3
    2006/11/30 11:25:06.926	  0:01.415	                  ekiga	OPAL version 2.2.3
    2006/11/30 11:25:06.932	  0:01.421	                  ekiga	PWLIB version 1.10.2
    2006/11/30 11:25:06.938	  0:01.427	                  ekiga	GNOME support enabled
    2006/11/30 11:25:06.944	  0:01.432	                  ekiga	Fullscreen support enabled
    2006/11/30 11:25:06.949	  0:01.438	                  ekiga	DBUS support enabled
    2006/11/30 11:25:06.960	  0:01.449	                  ekiga	Set TCP port range to 30000:30010
    2006/11/30 11:25:06.968	  0:01.457	                  ekiga	Set RTP port range to 5000:5059
    2006/11/30 11:25:06.976	  0:01.465	                  ekiga	Set UDP port range to 5060:5100

  no other output is generated by the time message "Registration failed: Timeout" appears in statusbar of ekiga gui.

Thanks for any information how to get this work,
maybe I will have to unify these two private networks together and connect
directly from my desktop-box to ADSL router.