{"action":"created","issue":{"url":"https://api.github.com/repos/vector-im/riot-android/issues/1744","repository_url":"https://api.github.com/repos/vector-im/riot-android","labels_url":"https://api.github.com/repos/vector-im/riot-android/issues/1744/labels{/name}","comments_url":"https://api.github.com/repos/vector-im/riot-android/issues/1744/comments","events_url":"https://api.github.com/repos/vector-im/riot-android/issues/1744/events","html_url":"https://github.com/vector-im/riot-android/issues/1744","id":273272665,"number":1744,"title":"Riot calls with \"Media Connection Failed\" error outside LAN?","user":{"login":"saljut7","id":11755530,"avatar_url":"https://avatars0.githubusercontent.com/u/11755530?v=4","gravatar_id":"","url":"https://api.github.com/users/saljut7","html_url":"https://github.com/saljut7","followers_url":"https://api.github.com/users/saljut7/followers","following_url":"https://api.github.com/users/saljut7/following{/other_user}","gists_url":"https://api.github.com/users/saljut7/gists{/gist_id}","starred_url":"https://api.github.com/users/saljut7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/saljut7/subscriptions","organizations_url":"https://api.github.com/users/saljut7/orgs","repos_url":"https://api.github.com/users/saljut7/repos","events_url":"https://api.github.com/users/saljut7/events{/privacy}","received_events_url":"https://api.github.com/users/saljut7/received_events","type":"User","site_admin":false},"labels":[{"id":300900751,"url":"https://api.github.com/repos/vector-im/riot-android/labels/bug","name":"bug","color":"fc2929","default":true},{"id":334372676,"url":"https://api.github.com/repos/vector-im/riot-android/labels/P2","name":"P2","color":"eb6420","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2017-11-12T22:43:00Z","updated_at":"2017-11-19T21:04:16Z","closed_at":null,"author_association":"NONE","body":"Hi,\r\n\r\nrunning an own synapse node I've configured COTURN and riot calls work fine _within_ my local network but not if one client is _outside_ my LAN. In this case I get `Media Connection Failed`.\r\n\r\nMy config:\r\n\r\n- Ports `3478` and `5349` are opened for both TCP and UDP on my server running synapse and my router.\r\n- Synapse version: `< Server: Synapse/0.23.1`\r\n- Riot.im Android versions used for testing: 1.) `0.7.03 (F-45a3aba)` | 2.) `0.7.03 (G-da8a7535b)`\r\n- `homeserver.yaml` TURN settings:\r\n\r\n```\r\n# The public URIs of the TURN server to give to clients\r\n#turn_uris: []\r\n#turn_uris: [ \"turn:my.ddns.net:3478?transport=udp\", \"turn:my.ddns.net:3478?transport=tcp\" ]\r\nturn_uris: [ \"turn:my.ddns.net:5439?transport=udp\", \"turn:my.ddns.net:5439?transport=tcp\" ]\r\n\r\n# The shared secret used to compute passwords for the TURN server\r\n#turn_shared_secret: \"YOUR_SHARED_SECRET\"\r\nturn_shared_secret: \"MySharedSecret\"\r\n\r\n# The Username and password if the TURN server needs them and\r\n# does not use a token\r\n#turn_username: \"TURNSERVER_USERNAME\"\r\n#turn_password: \"TURNSERVER_PASSWORD\"\r\n\r\n# How long generated TURN credentials last\r\n#turn_user_lifetime: \"1h\"\r\nturn_user_lifetime: \"86400000\"\r\n\r\n# Whether guests should be allowed to use the TURN server.\r\n# This defaults to True, otherwise VoIP will be unreliable for guests.\r\n# However, it does introduce a slight security risk as it allows users to\r\n# connect to arbitrary endpoints without having first signed up for a\r\n# valid account (e.g. by passing a CAPTCHA).\r\n#turn_allow_guests: True\r\nturn_allow_guests: False\r\n```\r\n\r\n- COTURN version: `4.5.0.2-3~bpo8+1 0`\r\n- OS version: `debian 8.9` (armbian: `4.9.7-sunxi armv7l (32 bit)`)\r\n- iptables config: https://pastebin.com/mBgeRH5U\r\n\r\nAny ideas?"},"comment":{"url":"https://api.github.com/repos/vector-im/riot-android/issues/comments/345549450","html_url":"https://github.com/vector-im/riot-android/issues/1744#issuecomment-345549450","issue_url":"https://api.github.com/repos/vector-im/riot-android/issues/1744","id":345549450,"user":{"login":"saljut7","id":11755530,"avatar_url":"https://avatars0.githubusercontent.com/u/11755530?v=4","gravatar_id":"","url":"https://api.github.com/users/saljut7","html_url":"https://github.com/saljut7","followers_url":"https://api.github.com/users/saljut7/followers","following_url":"https://api.github.com/users/saljut7/following{/other_user}","gists_url":"https://api.github.com/users/saljut7/gists{/gist_id}","starred_url":"https://api.github.com/users/saljut7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/saljut7/subscriptions","organizations_url":"https://api.github.com/users/saljut7/orgs","repos_url":"https://api.github.com/users/saljut7/repos","events_url":"https://api.github.com/users/saljut7/events{/privacy}","received_events_url":"https://api.github.com/users/saljut7/received_events","type":"User","site_admin":false},"created_at":"2017-11-19T21:04:15Z","updated_at":"2017-11-19T21:04:15Z","author_association":"NONE","body":"@ara4n \r\n\r\n> Your best bet is to submit bug reports from both the sending and receiving clients and then ping us on #matrix-dev:matrix.org to investigate. Also look at your coturn logs to see if you can see both clients trying to talk TURN to it in order to create the necessary ICE candidates.\r\n\r\nJust upgraded to my synapse server to 0.25.1, tried again, same problem (call within LAN works, outside not). I've send a bug report from within riot. I will try to \"ping you\" on #matrix-dev:matrix.org as you say but for \"freetime admins\" it is quite [complicated to observe a chat all the time](https://github.com/matrix-org/matrix.org/issues/43). Anyway, thx for your reply!\r\nImportant: I know that the call feature worked under 0.23.1 or lower (don't remember) cause I had a very long and successfull test call first time I've set up the TURN server.\r\n\r\n@jistr \r\n\r\n>  @saljut7 can you check if that's the case for you as well?\r\n\r\nTrying again I had working call within my LAN and a not working call from outside my LAN to inside my LAN:\r\n\r\n1. My `homeserver.log` has no entries like `turnServer?a ccess_token=<redacted>` in the relevant period of time. Did I look in the right log file?\r\n\r\n2. I wanted to check the coturn log files but I don't have any. I activated `log-file=/var/tmp/turn.log` in `/etc/turnserver.conf`, restarted coturn, made a test call but still no log files in `/var/tmp/`."}}
{"actor":{"display_login":"saljut7"}}