Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We currently run a VoIP server using an upstream providers SIP proxy for our clients who are behind NAT. We now have the problem that we re ending the relationship with the upstream provider, and will no longer have access to their nice NAT proxy!

We've decided we should probably build one ourselves. We've done some fairly extensive googling on this subject and it seems to be you need to use OpenSIPs and MediaProxy to build one. Problem is documentation on the subject seems to vary between really vague and assuming lots of back knowledge, or really outdated and therefore useless.

I'm looking for a thorough guide or set of worked examples on how to get a NAT proxy for VoIP set up working from scratch. Any pointers to known god guides, or just outright step-by-step answers will be appreciated!


To clarify, what I'm looking for is a guide to building the server that the phone talks to through the "Proxy" setting of most SIP phones.

share|improve this question
this appears to be unsolvable. – SimonJGreen Oct 30 '12 at 23:46

I have used Siproxd in the past in these situations (several SIP endpoints, registering with an external SIP softswitch, and a non SIP-aware router in between), and it has worked very well. It's quite simple to install and set up. The project page has detailed installation and configuration documentation.

If you want to go really simple, and you are able to switch out what router you use, fire up a pfSense router. pfSense has a siproxd package available, which is a single-click install.

share|improve this answer
For those are *nix challenged like me, a pfSense router will let you install siproxd as a package. – Robin Gill Jan 29 '12 at 1:30 I mentioned in my answer. :) – EEAA Jan 29 '12 at 1:44
we need the NAT proxy to be held outside of the customer's networks, and usable by any of the NAT customers remotely. This unfortunately make a router with ALG not a viable option. – SimonJGreen Jan 31 '12 at 10:09

I'm guessing you want to run your SIP proxy on the LAN side of your NAT router.

share|improve this answer
actually we need it the other way round, so connectivity goes: handset>natRouter>internet>natProxy>PBX – SimonJGreen Jan 31 '12 at 10:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.