Only internal calls possible

[mniehren]

@fbartels

here is my kwmserver.cfg:

oidc_issuer_identifier = https://kopanotest.tuxlan.de
insecure = no
enable_guest_api = yes
registration_conf = /etc/kopano/konnectd-identifier-registration.yaml
turn_uris = turn:kopanotest.tuxlan.de:5349?transport=tcp
turn_server_shared_secret = /etc/turnserver.secret
public_guest_access_regexp = ^group/public/.*

[mniehren]

@fbartels

if your support need root access over ssh, send me the public key to michael@niehren.de

[fbartels]

@mniehren said in Only internal calls possible:

turn_uris = turn:kopanotest.tuxlan.de:5349?transport=tcp

There are two issues on this line:

1. you are using the tls port of turn, but classify it as non-tls in the url (turn: instead of turns:)
2. but: most browsers do not fully support turns, so its recommended to use a non tls connection to the server.

[mniehren]

@fbartels

so it’s better to take turn with port 3478 for all browsers ?

[fbartels]

@mniehren yes

Edit: well it does not have to be this port, but simply the non-tls port of your turn. To raise the chance to get connections on public hotspots you should actually make your turn listen on port 443.

[mniehren]

ok, i open the port 3847/tcp on the firewall, change the config to
turn_uris = turn:kopanotest.tuxlan.de:3478?transport=tcp
and restart kwmserverd

but i still got no connection with Chrome

[mniehren]

@fbartels

Port 443 is handled by kwebd. It’s all on the same server.

[fbartels]

@mniehren said in Only internal calls possible:

3847/tcp on the firewall

Typo?

If it still does not work I recommend again to get in direct contact with our support: https://kopano.com/support-info/

[mniehren]

@fbartels

i mean port 3478/tcp

[mniehren]

Hi Felix,

i found the error. I forgot to open the firewall for the turnserver UDP Port’s. Now,
everything is runnig :-)). Many thanks for your help.