From owner-freebsd-questions@FreeBSD.ORG Sat Dec 2 16:13:50 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id EF1FA16A40F for ; Sat, 2 Dec 2006 16:13:50 +0000 (UTC) (envelope-from kurt-list-freebsd@androme.com) Received: from fafnir.androme.com (fafnir.androme.com [62.58.96.158]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6DF0943CA8 for ; Sat, 2 Dec 2006 16:13:29 +0000 (GMT) (envelope-from kurt-list-freebsd@androme.com) Received: by fafnir.androme.com (Postfix, from userid 1003) id 4C08BBA3168; Sat, 2 Dec 2006 17:13:49 +0100 (CET) Message-ID: <4571A63D.1020605@androme.com> Date: Sat, 02 Dec 2006 17:13:49 +0100 From: Kurt Dethier User-Agent: Thunderbird 1.5.0.8 (Windows/20061025) MIME-Version: 1.0 To: Derrick Edwards References: <45718A77.3090107@androme.com> <45718C19.2000809@joeholden.co.uk> <200612021034.45192.derrick@uniquestrength.net> In-Reply-To: <200612021034.45192.derrick@uniquestrength.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: joe@joeholden.co.uk, freebsd-questions@freebsd.org, Marwan Sultan Subject: Re: VoIP behind NAT and FreeBSD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Dec 2006 16:13:51 -0000 Derrick Edwards wrote: > On Saturday 02 December 2006 09:22, Joe Holden wrote: >> Kurt Dethier wrote: >>> STUN will only work if you have the correct NAT implementation on >>> your gateway. If you are using pf, you get what the STUN RFC calls >>> a symmetric NAT. STUN will not help you in such an implementation. >>> I'm not sure how the other NAT solutions on FreeBSD are implemented. >>> >>> If you need a solution for a symmetric NAT, you need something that >>> understands the signaling protocol and can add fw/nat rules on demand >>> on your gateway, or a media proxy (like TURN). >>> >>> Kurt >> >> It is entirely possible to use voip behnd symmetric nat, but it also >> entirely depends on the setup, some more details will help. >> > Hi, > I am not sure of your setup either, but I have Vongae working behind a FreeBSD > Firewall/Router using PF with NAT. Hi all, It is very possible to use VOIP behind a symmetric NAT, but STUN is not going to be any help. Depending on the setup and clients I have implemented a number of solutions over the past years. Unfortunately I haven't found a single solutions that always works. Kurt