system toolbox » voip

čačkajući na kraju uopšte nat pravila nisu bitna bila - isto je bilo da isključim ili djelimično uključim DNAT 5060/RTM 10000-11000 (povećavao sam ovaj opseg i na portove 3000-20000 ali bez ikakvih rezltata)

nakon promjena kernela, najednom je to proradilo ? da li je do asterisk-a da li do kernel-a

napomena: raidlo je na kernelu 2.6.24

testirao na 2.6.18 i radi, pa u čemu je kvaka ???

root@ifold:~# uname -a

Linux ifold 2.6.18-053.5hernad3-openvz-misdn #1 SMP Thu May 8 13:21:15 CEST 2008 i686 GNU/Linux

root@ifold:~# lsmod | grep ip_

ip_nat                 25520  1 iptable_nat
ip_conntrack           63844  2 iptable_nat,ip_nat
nfnetlink              14520  2 ip_nat,ip_conntrack
ip_tables              22756  1 iptable_nat
x_tables               22948  2 iptable_nat,ip_tables
root@ifold:~# lsmod | grep nf_

root@ifold:~# uname -a

Linux ifold 2.6.17.14-misdn-cvs #1 SMP Sun Dec 24 15:52:16 CET 2006 i686 GNU/Linux

root@ifold:/etc/asterisk# lsmod | grep ip_

ip_nat                 19884  1 iptable_nat
ip_conntrack           53216  2 iptable_nat,ip_nat
nfnetlink               8216  2 ip_nat,ip_conntrack
ip_tables              15204  1 iptable_nat
x_tables               16132  2 iptable_nat,ip_tables

radi i sa starim kernelom ??! onda može samo biti do asterisk-a

da li je sa novim asteriskom stvar sada ok ?

evo postavki asterisk-a koje smatram bitnim

sip.conf

[general]
srvlookup=yes
context=demo
;allowoverlap=no                        ; Disable overlap dialing support. (Default is yes)
bindaddr=0.0.0.0                ; IP address to bind to (0.0.0.0 binds to all)
canreinvite=no
srvlookup=yes
localnet=192.168.45.0/255.255.255.0
;localnet=192.169.45.0/255.255.255.0

[12]
type=friend
username=12
password=xxx
host=dynamic
callerid="stan_2" 

[31]
type=friend
username=31
password=xxxx
host=dynamic
callerid="officesa_1" 

rtp.conf

[general]
rtpstart=10000
rtpend=11000

što se tiče nat-a imamo samo dva SNAT pravila

root@ifold:~# iptables -L -t nat -v

Chain PREROUTING (policy ACCEPT 2290 packets, 197K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 42 packets, 4321 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2235  186K SNAT       0    --  any    any     192.169.45.0/24      192.168.45.0/24     to:192.168.45.4 
    1   159 SNAT       0    --  any    any     192.168.45.0/24      192.169.45.0/24     to:192.169.45.4 

Chain OUTPUT (policy ACCEPT 19 packets, 2941 bytes)
 pkts bytes target     prot opt in     out     source               destination