[OpenSIPS-Users] MediaProxy as bridge between Private and Public Interfaces

[Daniel Worrad]

Hi Saul,

I did some more testing, and the error arises as soon as I add the static route for the provider out the private interface. Very strange.

-----Original Message-----
From: users-bounces at lists.opensips.org [mailto:users-bounces at lists.opensips.org] On Behalf Of Saúl Ibarra Corretgé
Sent: Monday, 8 February 2010 8:11 PM
To: OpenSIPS users mailling list
Subject: Re: [OpenSIPS-Users] MediaProxy as bridge between Private and Public Interfaces

Hi,

El 03/02/10 23:17, Daniel Worrad escribió:
> Hi Saúl,
>
> Thanks for your help, as you suggested, it doesn't look like the rtp timeouts are working. I am running CentOS kernel 2.6.18-92.el5, with the following component versions:
>
> gnutls-2.4.1
> python-application-1.2.1
> libnetfilter_conntrack-0.0.101
> mediaproxy-2.3.10
> mediaproxy-2.3.10
> python-cjson-1.0.5
> Twisted-9.0.0
> confuse-2.6
> kamailio-1.5.3-notls
> python-gnutls-1.1.9
> confuse-2.6
> pyrad-1.1
> conntrack-tools-0.9.13
> libgcrypt-1.4.5
> libnfnetlink-1.0.0
> Python-2.5.2
> zope.interface-3.3.0
> libnfnetlink-1.0.0
>
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
> Private Subnet  0.0.0.0         255.255.255.240 U     0      0        0 eth1
> Provider Proxy  Private Next Hop255.255.255.240 UG    0      0        0 eth1
> Provider Proxy  Private Next Hop255.255.255.240 UG    0      0        0 eth1
> Provider Proxy  Private Next Hop255.255.255.224 UG    0      0        0 eth1
> Public Subnet   0.0.0.0         255.255.255.0   U     0      0        0 eth0
> 0.0.0.0         Public GW       0.0.0.0         UG    0      0        0 eth0
>
> eth0      Public Interface
> eth1      Private Interface
>
> Using the following IPTables command (otherwise all the packets for the Provider Proxies get routed out the private interface with a public source IP:
>
> iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to-source<Private IP>
>
> Recieving the error w/ firewall turned off as well.
>
>
> As you suspected, UDP timeouts don't seem to be working. There is nothing about sessions timing
>

2.6.18 was the first kernel supporting conntrack, and I, as a Debian 
user, don't know how CentOS packages their kernels. I guess they add 
custom stuff in there as every distro does, so I suggest you upgrade to 
a newer kernel, because it looks like your kernel is lacking something.



Regards,

-- 
Saúl Ibarra Corretgé
AG Projects

_______________________________________________
Users mailing list
Users at lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users