[VoIP] SIP/firewall problem - the saga

john jones jjones3601 at yahoo.com
Sun Nov 19 22:30:00 CST 2006


Hmmmm.

Doesn't Vonage use SIP?  I'd bet at least some Vonage
customers use NAT!   Seems like Asterisk needs to be
enhanced to use SIP through NAT reliably.


--- "John R. Covert"
<john_reads_cnet_via_archives at covert.org> wrote:

> You will never see an end to problems attempting to
> do SIP connections
> from outside a NAT router to an Asterisk box.
> 
> Unless an Asterisk box is ON a public IP address
> (i.e. the actual
> interface _is_ the public address, with no NAT
> translation) you will
> have constant problems with clients trying to
> register.  You may be
> able to get one client to work, and then others will
> stop working.
> 
> There really is no NAT solution.
> 
> If you intend to provide service to SIP clients you
> MUST be on the
> public internet.  It's fine to be behind a firewall,
> but it must
> _not_ be doing any NAT translation of _either_ ports
> _or_ IP
> addresses for the Asterisk box.  That means your
> router must be
> routing multiple IP addresses through to your
> internal network,
> or your router must be your asterisk box.
> 
> To be a "service provider" (even for your own
> portable ATAs or
> phones or softclients), you really want to make your
> Asterisk
> box BE your firewall.  Two NICs, one plugged
> directly into your
> internet connection, the other one providing your
> inside service.
> Nothing else will work reliably.  Asterisk is simply
> not designed
> to handle NAT well at all, except for a small number
> of cases of
> outbound-only registrations.
> 
> /john
> 
> _______________________________________________
> VoIP mailing list
> VoIP at ckts.info
> http://lists.ckts.info/mailman/listinfo/voip
> Project Web Page: http://www.ckts.info/
> 
> 



 
____________________________________________________________________________________
Sponsored Link

Mortgage rates near 39yr lows. 
$310k for $999/mo. Calculate new payment! 
www.LowerMyBills.com/lre



More information about the VoIP mailing list