Re: [GnomeMeeting-devel-list] SIP, RTP ports and firewall

[Daniel Huhardeaux <devel tootai net>]

Damien Sandras a écrit :

> Le mardi 22 novembre 2005 à 12:21 +0100, Daniel Huhardeaux a écrit :
>  
>
> > Damien Sandras a écrit :
> >
> >    
> >
> > > Le mardi 22 novembre 2005 à 12:03 +0100, Damien Sandras a écrit :
> > >
> > >
> > >      
> > >
> > > > And also, it looks exactly like the bug I fixed 2 days ago.
> > > >
> > > > Can you make sure that you are using version 2.22 of rtp.cxx?
> > > >
> > > >
> > > >
> > > >   
> > > >
> > > >        
> > > Also, don't forget to put the break as explained yesterday. thanks.
> > >
> > > Btw, it just looks like those ports are not locally usable on your
> > > machine.
> > >
> > >
> > >      
> > They are. All my SoftPhones, ATA or IP phones are using those ports. 
> > Just have to modify the IP in iptables and those ports are redirected to 
> > the device/soft on which I'm working. I just try with Linux version of 
> > XLite and it's ok.
> >    
>
>
> And you are sure that Xlite is binding to those ports locally?
>  

Call to #1612 fwd pulver com (FWD is my second account, first and third 
are disabled). Listen SIP port=5060, listen RTP port=16384 in System 
Settings -> Networks from XLite

tcpdump -i ppp0 udp and port 16384 on my GW

Last logs:

13:07:24.773325 IP 69.90.168.13.12604 > 
cdb64.neoplus.adsl.tpnet.pl.16384: UDP, length: 172
13:07:24.777176 IP cdb64.neoplus.adsl.tpnet.pl.16384 > 
69.90.168.13.12604: UDP, length: 172
13:07:24.793437 IP 69.90.168.13.12604 > 
cdb64.neoplus.adsl.tpnet.pl.16384: UDP, length: 172
13:07:24.803263 IP cdb64.neoplus.adsl.tpnet.pl.16384 > 
69.90.168.13.12604: UDP, length: 172
13:07:24.803817 IP cdb64.neoplus.adsl.tpnet.pl.16384 > 
69.90.168.13.12604: UDP, length: 172

tcpdump udp and port 16384 and host 192.168.10.10

Last logs:

13:13:51.483137 IP 192.168.10.10.16384 > 69.90.168.13.19464: UDP, 
length: 172
13:13:51.483646 IP 192.168.10.10.16384 > 69.90.168.13.19464: UDP, 
length: 172
13:13:51.526479 IP 69.90.168.13.19464 > 192.168.10.10.16384: UDP, 
length: 172
13:13:51.529946 IP 192.168.10.10.16384 > 69.90.168.13.19464: UDP, 
length: 172
13:13:51.530505 IP 192.168.10.10.16384 > 69.90.168.13.19464: UDP, 
length: 172

Didn't change anything at my firewall rules between those calls and GM 
calls. I pluged Sipura1001, working well with the same rules.

To explain you, on my firewall I have several SIP setup ready for privat 
IP addresses, EG 16560 UDP for signalling and 16384:16388 for RTP. 
Second will be 16561, 16389:16393 aso.

When I want to make some test with SIP devices and servers *OUTSIDE* my 
networks, just have to adapt the IP address and ports in 
Softphone/ATA/IP Phone with my FW ones, that's all. Apart from GM :-(, 
it's working like a charm, even with windows soft under wine!

I had the same rules with GM in H323 and GnuGK on the same lan, was 
working well. And I have the same for IAX agent/servers, working well 
too (3 asterisks on the same network ;-))

--
Daniel