From owner-freebsd-questions@freebsd.org Wed Mar 22 08:00:21 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1CF95D175CE for ; Wed, 22 Mar 2017 08:00:21 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A7C0A1E63 for ; Wed, 22 Mar 2017 08:00:20 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: by mail-wm0-x22d.google.com with SMTP id n11so28914599wma.1 for ; Wed, 22 Mar 2017 01:00:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=A/t/yLzG4H6NQVo6EB4UVEN5DdBsdK9HdxfWl2G7N/M=; b=oQWTgZ4KhzLehwr5laOYLnFu03O5KxupdwMpU/zLWYoD2HbE7XG4IuUeVHWv7GP6IB zzE156n8fImrk3xWX5hV2JxLIc3s8oUHOLU/lVt2OJcyKSm+wPdaOcrOMCUVR3rhxFBJ UynamLLwNoSG+B5rOlGANxDLadSdXgEz4q3phXaVRUL77TNlsiBo53AiL3VN6HdrsSB9 ljqimrPo5u+nsNBiYsSJXUtoNfCX5QT7j13vgYB7vljSLkZvskVOMFfYwXCYs4xfjg3V xerzsvvEn8o9t2pVUGXweoJ+9s6fo5V0c9YFda1dajfVokwyEdun6to7+TxJc7Zs6TFo bXdA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=A/t/yLzG4H6NQVo6EB4UVEN5DdBsdK9HdxfWl2G7N/M=; b=Lz6jQsIYnfk6K6QSZv/E3uNJcZaiFzlyUIqD5Oejwh2r/0If0KFDL2jPiRX1fEVRA2 DG1mydX86qqIxK1aH5wjCcBxyMgv8whnI5sMhGH5c4HnYDj57FnSk0vuPv/t0LI4M/Q0 AB5HBJ6kdVL/rsuOHvfK0wI0yKxTES2pL5mv/LOfFctKX+UGsMORIYNIAoVkTIt/K0Rk 28QLVwalnbhBAz6rzqwS5Yjjkbd1KeoenBUNuYnnr9ZV+k3Dp77PXG2WJ/SLThMnThWd WujgRAkZ49nKNOJ4dDLgJhXpRW3FiWP7PT8RblW7TbM4QEA5uVI1v20UoANPF0oc9XrQ n76g== X-Gm-Message-State: AFeK/H1tRnudM7OHg5GKKp2OyuDwz5mYEl2dJqcsqE52kiArMjAo7srXY3ab4N9H2wsHd1JR+6Klo2+Oe0GZWg== X-Received: by 10.28.14.69 with SMTP id 66mr6214972wmo.27.1490169618784; Wed, 22 Mar 2017 01:00:18 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.134.176 with HTTP; Wed, 22 Mar 2017 01:00:17 -0700 (PDT) Received: by 10.80.134.176 with HTTP; Wed, 22 Mar 2017 01:00:17 -0700 (PDT) In-Reply-To: References: From: Shamim Shahriar Date: Wed, 22 Mar 2017 08:00:17 +0000 Message-ID: Subject: Re: pf, nat, and asterisk in jail To: David Mehler Cc: "freebsd-questions@FreeBSD.org" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Mar 2017 08:00:21 -0000 Hi Dave, not sure how exactly you have your jail's in terms of of and the rest of the network, so cannot give you any definite information. But I have asterisk box with of where I had to open a range of ports for RTP to work. If your jail is on the same subnet, you can try that (if your jail m had its own of, don't forget to open then from the host pf). If your jail is begging a NAT, I think you will benefit from 1:1 may and then opening the range for the host. Hope this helps. Best regards On 22 Mar 2017 4:25 am, "David Mehler" wrote: > Hello, > > I've asked this on freebsd-pf so far no response so thought i'd try here. > > Is anyone using pf with asterisk in a jail? If so how did you get rtp > going? The sip is going through fine, I'm using 10.3, and my pf policy > is default deny. Under that circumstance rtp is not going, I know this > because of the fact that changing the block all to pass all and it all > works. > > Thanks. > Dave. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" >