From owner-freebsd-net@freebsd.org Fri May 13 13:32:31 2016 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 494F4B39F71; Fri, 13 May 2016 13:32:31 +0000 (UTC) (envelope-from ler@lerctr.org) Received: from thebighonker.lerctr.org (thebighonker.lerctr.org [IPv6:2001:470:1f0f:3ad:223:7dff:fe9e:6e8a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "thebighonker.lerctr.org", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1F5A712C6; Fri, 13 May 2016 13:32:31 +0000 (UTC) (envelope-from ler@lerctr.org) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lerctr.org; s=lerami; h=Message-ID:References:In-Reply-To:Subject:Cc:To:From:Date: Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Reply-To: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=X1cx9I4zwMd/xSt105woNYGstXzH/1rwO9NvdolTPCI=; b=oybQFP2uOCq0UpJIczxHogE4/7 N5Qgal5l/QrDp/xMlZF+SDdr75xD9v+AOTh9hkz1QrjqdW4A91UVQKgJgdLihPwpw769XJi0aQmbI VtJrJkyIZ7F1+i6Np7Ltf8woSzF75uUqnkXikHSPm7sfjlMwPKwirDU5OYgkQuMnPHts=; Received: from thebighonker.lerctr.org ([2001:470:1f0f:3ad:223:7dff:fe9e:6e8a]:37685 helo=webmail.lerctr.org) by thebighonker.lerctr.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87 (FreeBSD)) (envelope-from ) id 1b1DCb-0009TD-9O; Fri, 13 May 2016 08:32:25 -0500 Received: from proxy.na.alcatel-lucent.com ([135.245.48.84]) by webmail.lerctr.org with HTTP (HTTP/1.1 POST); Fri, 13 May 2016 08:32:25 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Fri, 13 May 2016 08:32:25 -0500 From: Larry Rosenman To: Eugene Grosbein Cc: James Lodge , freebsd-net@freebsd.org, owner-freebsd-net@freebsd.org Subject: Re: NAT SIP ALG In-Reply-To: <5735C8FB.908@grosbein.net> References: <5734D478.2010809@grosbein.net> <9F55FBCB-4B1A-4134-8912-9A5B25F37703@Lodge.me.uk> <5735C8FB.908@grosbein.net> Message-ID: <027cf5fb5beaf0ab01045f49a4a2adb1@thebighonker.lerctr.org> X-Sender: ler@lerctr.org User-Agent: Roundcube Webmail/1.1.4 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 May 2016 13:32:31 -0000 On 2016-05-13 07:30, Eugene Grosbein wrote: > 13.05.2016 5:26, James Lodge wrote: > >> I use siproxd on pfsense and it works really well. > > How do you use them? > > I have SIP PBX inside private network that has old slow Cisco router as > NAT box. > > The PBX registers with several distinct external SIP providers and > accepts external > calls for local call center. I need to replace Cisco router with > something having much > more horsepower and consider FreeBSD/amd64 but need to make sure SIP > won't break. > > Will siproxd help me in such case? I still need the PBX to be able to > register > directly to external SIP providers as it is administrated by outsourced > company. > My asterisk server (pbx) registers through my NAT without ANY rules or what have you. I do have the NAT option turned on for the 4 providers I connect to. That said, sipoxd/pfSense may work as well. I do go through pfSense, but again do NOT have any SUP proxying. The asterisk server just keeps a registration open. I can get and receive calls. FWIW -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: ler@lerctr.org US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281