Re: siproxd not reacting on incoming connections

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============7622586129135392325==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="oNoE0wZLpEJJz8fG0YvgCveX8staUqjvk"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--oNoE0wZLpEJJz8fG0YvgCveX8staUqjvk
Content-Type: multipart/mixed; boundary="OHGro7yDHxAE4Bza1k7DKJyymlR09VDhs";
 protected-headers="v1"
From: Thomas Ries <[email protected]>
To: Siproxd-users <[email protected]>
Message-ID: <4ecd1b56-0f9d-8901-26de-3cc869228a14-hi6Y0CQ0nG0@public.gmane.org>
Subject: Re: [Siproxd-users] siproxd not reacting on incoming connections
References: <CALxA4cmVYJws5hdwq2ogu7_8T9GpwqegDpRSNNnrZ6yoicguhg-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
In-Reply-To: <CALxA4cmVYJws5hdwq2ogu7_8T9GpwqegDpRSNNnrZ6yoicguhg-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>

--OHGro7yDHxAE4Bza1k7DKJyymlR09VDhs
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Hi,

1) setting hosts_allow_reg =3D 0.0.0.0/0  is a bad idea,
you don't want all the internet be able to register with your siproxd.
hosts_allow_reg should be restricted to your local network.
Remember, siproxd does proxy between public Internet and local networks t=
hat
are connected to the Internet via NAT.

2) if using the same interface for if_inbound and if_outbound you must te=
ll
siproxd what its public IP is. Either by setting host_outbound or using t=
he
STUN plugin.

3) Enabling debug output will give more information about what is happeni=
ng.

Regards,
/Thomas

On 09/04/2018 01:36 PM, bloodcarter wrote:
> iptables is configured properly, because when I set hosts_allow_reg for=
 some
> fake subnet and try to connect using my sip client, siproxd warns about=

> non-authorised attempt. And that's correct. But when I change hosts_all=
ow_reg
> =3D 0.0.0.0/0 <http://0.0.0.0/0> to allow registrations from any IP, th=
en just
> nothing happens, no logs, nothing.
>=20
> My siproxd.conf is below:
> if_inbound=C2=A0 =3D eth0
> if_outbound =3D eth0
> hosts_allow_reg =3D 0.0.0.0/0 <http://0.0.0.0/0>
> sip_listen_port =3D 5060
> daemonize =3D 0
> silence_log =3D 0
> log_calls =3D 1
> user =3D siproxd
> registration_file =3D /var/lib/siproxd_registrations
> pid_file =3D /var/run/siproxd/siproxd.pid
> rtp_proxy_enable =3D 1
> rtp_port_low=C2=A0 =3D 10000
> rtp_port_high =3D 30000
> rtp_timeout =3D 300
> default_expires =3D 600
> debug_level =3D 0
> debug_port =3D 0
>=20
> --Vladislav Chernyshov
>=20
>=20
> -----------------------------------------------------------------------=
-------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>=20
>=20
>=20
> _______________________________________________
> Siproxd-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/siproxd-users
>=20


--OHGro7yDHxAE4Bza1k7DKJyymlR09VDhs--

--oNoE0wZLpEJJz8fG0YvgCveX8staUqjvk
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
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=Lpr3
-----END PGP SIGNATURE-----

--oNoE0wZLpEJJz8fG0YvgCveX8staUqjvk--


--===============7622586129135392325==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
--===============7622586129135392325==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Siproxd-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/siproxd-users

--===============7622586129135392325==--