Connecting external users via their proxy

[Tam-Ov]

Hi. We have server behind a NAT. Added lines org.ice4j.ice.harvest.NAT_HARVESTER_LOCAL_ADDRESS=192..... org.ice4j.ice.harvest.NAT_HARVESTER_PUBLIC_ADDRESS=18.....

External users are connecting normally. But there are problems for those external users who use a proxy. They see and hear only themselves. Wireshark shows that traffic on port 10000 does not go through a proxy, there is an attempt to connect to external ip address.

Internet Protocol Version 4, Src: 192.168.1.26, Dst: 18X.....202 User Datagram Protocol, Src Port: 54052, Dst Port: 10000

Help me understand why data on port 443 goes through a proxy, but data on port 10000 does not

[saghul]

What type of proxy are they using? Any chance they are blocking UDP traffic?

[Tam-Ov]

They using squid. In squid allowed all traffic to udp 10000. 443 goes through squid. 10000 port goes through the computer’s gateway, not through squid. Need to additionally open 10000 port in firewall of a third-party organization

[saghul]

Yes squid is an HTTP proxy, so they need to allow traffic to UDP port 10000 on the outbound.

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.