CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


I'd like to thank everyone involved for making "The CPUG Challenge" a great success.
We helped a lot of people see and learn a bit more about R80.10, while having some fun.
We will be using this success to try and bring more events to more locations soon. -E

 

Results 1 to 2 of 2

Thread: SIP + dst nat == fix up headers?

  1. #1
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,456
    Rep Power
    8

    Default SIP + dst nat == fix up headers?

    Does anyone know if the server side of a SIP session should have headers rewritten? I have a src and dst nat ( i know, asking for trouble ). I can see the client headers are being rewritten correctly, but the server side isn't. For example the contact: field in the message header has the server's real address and not the nat IP of the the server. To be clear the IP (layer 3) of the server was correctly natted.

    If i can't get this to work right i think i'm going to have to do a double vpn. Haven't done that before but its all setup in a lab replication so i have a play ground setup.


    assuming i'm goin double vpn this is what i'm thinking.

    phone fw1 < -VPN1 -> fw2 < - VPN2 - > sip server

    where vpn1 is really across the internal network and VPN2 is across the inet.

    I'll take my answer off air, thanks!

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,456
    Rep Power
    8

    Default Re: SIP + dst nat == fix up headers?

    So in my case the destination is a proxy as all the phones call the voip server and thus a dest nat. Once support cleared that up definition they pointed me back to the nat restrictions SK and it says its not supported (could be bidirectional or proxy nat).

Similar Threads

  1. Can you block non-ASCII characters in the headers while allowing them in the body?
    By Spacetrucker in forum Web Security Blade (Formerly Web Intelligence)
    Replies: 8
    Last Post: 2011-02-11, 20:04
  2. content disposition headers
    By forbin in forum Content Security/Security Servers/CVP/UFP
    Replies: 1
    Last Post: 2006-10-06, 12:46

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •