sip voip traffic forwarding

sip voip traffic forwarding

[Barry R Cisna]

Hello List,

First time posting here. I am fairly familiar with iptables rules in
general. I always use Webmin to apply rules to try and cut down on me
fatfingering things:). I am trying to get port forwarding working on my
Linux terminal server ,server to a newly built asterisk/trixbox. This is
on a default install of K12ltsp/ Centos5,default kernel. I have tried
all of the MANY how to's on trying to get the correct stuff forwarded.No
luck bottom line.

Setup: Linux server has two nics in it. eth1=public eth0=internal
Asterisk/trixbox one nic eth0
internet-->cable connection-
-->Linksys wrt54gs router to LinTS->eth1
All ports on the linksys wrt54gs are forwarded to the LinTS. (The only
purpose the linksys is really serving is wifi for a couple laptops.)
LinTS runs iptables.
I have loaded the ip_conntack_sip & ip_nat_sip modules into iptables.
Naturally, the TS has nat/MASQ setup on it with a default install.

I'll try and 'display' as best I can my setup physically.

**internet**-->wrt54gs-->eth1=LinTS=eth0(nat/masq)-->switch-->clients
						     -->asterisk/trixbox


Gateway;192.168.1.1-eth1;192.168.1.2-eth0;192.168.0.1-.dhcp/nat->clients
,asterisk

Is this do-able with the default iptables contained in Centos5,or do i
need to add some patches,and add ons?
Sidenote: I was considering setting the astersk server right on the
wrt54gs linksys,but my plan is to do away with the linksys if I can make
this work to cut down on clutter/pieces,cabling.
I would need to of course udp 5061, 10000-20000 forward to asterisk
server from LinTS eth1,eth0?.
Would someone be good enough to do a ,,1.,,2.,,3. how to accomplish
this?
Sorry for the long post.

Thanks,

Barry
                                         

Re: sip voip traffic forwarding

[Marek Kierdelewicz]

>I would need to of course udp 5061, 10000-20000 forward to asterisk
>server from LinTS eth1,eth0?.
>Would someone be good enough to do a ,,1.,,2.,,3. how to accomplish
>this?

I hope I understand your post the way you meant. If so following
iptables rule on TS may do the job:

iptables -t nat -A PREROUTING -d 192.168.1.2 -p udp --dport 5060:5061 \
-j DNAT --to ASTERISK_ADDR

This would allow connections coming from internet to be redirected to
asterisk box. Rules above may not work in the desired way if you
already have some entries in PREROUTING chain or some of the traffic
is filtered.

Regards,
Marek Kierdelewicz