[OpenSIPS-Users] Wierd OS ACK to private IP

[David Villasmil]

I tried that but nothing... In any case I don't think it would work. The UAC
(or the router) sends the ACK like this:


U +0.142623 A.B.C.D:60962 -> W.X.Y.Z:5060
ACK sip:04184233727 at 192.168.254.2:45828 SIP/2.0*       <-----
Via: SIP/2.0/UDP 10.0.0.6:45828
;branch=z9hG4bK-d8754z-a335c33b301d7d17-1---d8754z-;rport*
Max-Forwards: 70*
Route: <sip:W.X.Y.Z;lr;ftag=062d897a;nat=yes>*
Contact: <sip:5010143 at A.B.C.D:60962>*
To: ""04184233727""<sip:04184233727 at my.domain.com<sip%3A04184233727 at my.domain.com>
>;tag=as761e23cb*
From: ""5010143""<sip:5010143 at my.domain.com <sip%3A5010143 at my.domain.com>
>;tag=062d897a*


The VIA is ok, but the marked line is NOT. That 192.168.254.2 is the UAC's
router private IP! So is it ACK'ing the router? don't know, but os relays
that ACK to ip 192.168.254.2... the calle IP is actually a public IP...

Anyway to fix this without touching the UAC?
Shouldn't OS be able to match the banch and relay that ACK to the rigth IP?

It seems like the UAC (10.0.0.6) is sending its ACK to the ROUTER (
192.168.254.2)

this is the setup:



OS (W.X.Y.Z) Public IP
 |
 |
 |
V
(A.B.C.D) public ip
ROUTER
(192.168.254.2)  private ip
 |
 |
 |
V
UAC (10.0.0.6)


thank you Bogdan.

David

On Sun, Aug 31, 2008 at 1:50 PM, David Villasmil <
david.villasmil.work at gmail.com> wrote:

> I'll try that, thanks a lot.
>
> d
>
>
> On Sun, Aug 31, 2008 at 1:23 PM, Bogdan-Andrei Iancu <
> bogdan at voice-system.ro> wrote:
>
>> Hi David,
>>
>> Try to do a fix_nated_contact() when the 200 OK goes through opensips - in
>> this way, the caller device will learn the public IP of the callee and not
>> the private one.
>>
>> Regards,
>> Bogdan
>>
>> David Villasmil wrote:
>>
>>> Thanks for answering,
>>>
>>>     Yes, I thought so. Thing is I can't do anything with the caller
>>> device, it is an eyebam. I believe this has something to do with ALG. The
>>> only problem on the whole sip exchange is this ACK... is there no way to
>>> modify that on the server? Also, the IP the UAC puts on the ACK is ITS OWN
>>> ip.. VERY wierd. Can we work around that somehow?
>>>
>>>
>>> Thanks a lot
>>>
>>> David
>>>
>>> On Sun, Aug 31, 2008 at 12:45 AM, Bogdan-Andrei Iancu <
>>> bogdan at voice-system.ro <mailto:bogdan at voice-system.ro>> wrote:
>>>
>>>    Hi David,
>>>
>>>    The ACK for  200OK is end2end , so it is generated by the original
>>>    caller and routed by proxies (without being regenerated) to the
>>>    final callee.
>>>
>>>    So, the private IP from the ACK's RURI is filled in by the caller
>>>    device and not by OpenSIPS - Normally, the RURI of ACK must be the
>>>    Contact from 200 OK.
>>>
>>>    Check this with the caller device.
>>>
>>>    Regards,
>>>    Bogdan
>>>
>>>    David Villasmil wrote:
>>>
>>>        Hello all,
>>>
>>>
>>>            I've got this very strange issue. A UAC behind NAT makes a
>>>        call, everything goes ok, but when OS sends the 200 OK for the
>>>        INVITE, it ACK OS with a PRIVATE IP has the domain! It is very
>>>        strange... what does OS does? it relays the ACK to THE PRIVATE IP,
>>>        which of course, doesn't exist. I've tried everything and
>>>        can't seem to be able to fix this problem, I hope someone can
>>>        give me a hand.
>>>
>>>
>>>        NGREP: http://pastebin.com/m633730e2
>>>        OPENSER.CFG: http://pastebin.com/m33ed87d4
>>>
>>>
>>>        Thanks
>>>
>>>
>>>        David
>>>
>>>
>>>  ------------------------------------------------------------------------
>>>
>>>        _______________________________________________
>>>        Users mailing list
>>>        Users at lists.opensips.org <mailto:Users at lists.opensips.org>
>>>        http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>
>>>
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.opensips.org/pipermail/users/attachments/20080901/32b163f7/attachment.htm