Re: SIP with NAT traversal and STUN using NPF

Greg Troxel <[email protected]> Sat, 13 Jun 2026 14:10:21 -0400
Newsgroups gmane.os.netbsd.devel.network
Message-ID <[email protected]>
Martin Husemann <[email protected]> writes:

> (I love subjects with tons of acronyms...)
>
> Has anyone here used NetBSD and NPF on a firewall and managed to allow
> a SIP device (like VoIP phone system) in the local LAN to connect via a
> STUN server to on an IPv4 connnection?

I think so, but I am surprised you are having trouble.

You said firewall, and you didn't say NAT.

STUN isn't really related to SIP, other than that devices that do SIP
tend to want to do STUN.  It's just UDP, mostly.    Also you said STUN
not TURN.

Did you use tcpdump on the LAN and WAN interfaces to watch the traffic?
What did you see?

You didn't post your firwall config.

Are other things working?  https?  ntp?  dns to outside (e.g. dig)?