VfX line on Asterisk suddenly is not accepting calls

Forums › WorldxChange / XNet / VFX › VfX line on Asterisk suddenly is not accepting calls

grkiwi

44 posts

Geek

Topic # 76806 7-Feb-2011 10:44
Hi all, Just got off the phone with WxC support who sugested I drop a line on this forum regarding my problem. I have set up an Elastix server for 6+ months now and have been running a VfX trunk on it. It worked like a charm with the default (from this forum) configuration WcX sent me over, but suddenly about 10 days ago it stoped receiving incoming calls. The caller instead got... silence... I then disabled the trunk in Elastix and registered through Eyebeam (PC soft SIP-phone). I could make calls, but still the same behaviour in incoming...! I then set up a call forwarding to my cell phone when not available (from the VfX control panel) so I don't lose calls... This morning I have re-enabled the trunk on Elastix (and disabled it from the soft-phone) but now my outgoing calls have gone too! Does anyone have a clue what is happening? I didn't change anything, but I am gradually losing all VfX functionality! Here are my trunk settings... PEER DETAILS username=XXXX type=peer secret=XXXX regseconds=180 registertimeout=20 port=5060 host=pan.wxnz.net dtmfmode=rfc2833 disallow=all allow=g729&ulaw&alaw USER DETAILS username=XXXXX type=peer secret=XXXX nat=yes insecure=invite,port host=pan.wxnz.net fromuser=xxxx context=from-trunk canreinvite=no Register string MYNUMBER:USER:SECRET@pan.wxnz.net/MYNUMBER Any help greately appreciated! Cheers

1 | 2

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436168 7-Feb-2011 10:51
We do not see any register attempts for that number at all, ie nothing is coming into us so the trunk is not registered, I am activly looking for your number now and do not see any thing, it may be getting blocked within your network somewhere Also may want to remove your number from the post Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

grkiwi

44 posts

Geek

Reply # 436172 7-Feb-2011 10:55
Ooops... corrected... I was doing tests and forgoten to re-enable the trunk... Fixed now...

maverick

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436178 7-Feb-2011 11:09
You seem to have an issue on your box, you are rejecting the call with a 407, you have inbound auth on somehow. SIP/2.0 407 Proxy Authentication Required Via: SIP/2.0/UDP 58.28.20.150:5060;branch=z9hG4bK-4045b-4d4f1a7d-5ea1694c-1c2e3f2b;received=58.28.20.150 From: ;tag=3201400a-13c4-4d4f1a7d-5ea1694c-2ec60b7a To: "" ;tag=as4a29bc96 Call-ID: BW110237460070211-821458903 CSeq: 1 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO Supported: replaces Proxy-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="49f98ed4" Content-Length: 0 Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

maverick

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436179 7-Feb-2011 11:10
Your registrations are fine btw Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

grkiwi

44 posts

Geek

Reply # 436182 7-Feb-2011 11:15
Thank you heaps for the help Maverick..!! I have now registered the soft phone and disabled the trunk on the box... But this is not receiving calls either!

maverick

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436183 7-Feb-2011 11:23
Your not responding to the invites being sent to you, this is why you are not getting calls in. Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

grkiwi

44 posts

Geek

Reply # 436186 7-Feb-2011 11:28
Hmmm.. OK thank you for that! Is there any reason you think this may be happening for? My soft phone is registered and can do outgoing calls... This whole behaviour came out of the blue when everything was working perfectly, either on the box, or on the SIP phone... Can my provider (Telecom) have changed anything on the line, security wise and affected the VoIP functionality?

maverick

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436190 7-Feb-2011 11:34
Looks to be a firewall or nat issue, outbound wise is fine because you are sending the invite, for the inbound to your asterisk server we are getting a SIP message back from your box so it's getting to your server fine but your rejecting it, this will be a config issue on the box it appears to be wanting to auth the invite going to you, this should not happen. This has nothing to do with Telecom and is all local network by the looks of it, Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

grkiwi

44 posts

Geek

Reply # 436192 7-Feb-2011 11:37
OK thnx for the help....! I will investigate further and come back.. :-)

maverick

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436198 7-Feb-2011 11:45
Saw you re register the Asterisk server, test call went through , this is what should happen and the invite is identical to previous ones Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

grkiwi

44 posts

Geek

Reply # 436199 7-Feb-2011 11:45
FIXED! I just forwarded port 5060 through the router... and voila!!!!! The puzzle is why it was working for a long time, and then decided to require a port forward!! Thank you for the help Maverick!!!

maverick

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436200 7-Feb-2011 11:55
probably a nat table just corupted in the router , always best practice to do a port forward to a staitic IP on VOIP devices anyway as appossed to a DHCP setup, stops these types of router / nat / firewall issues. Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

grkiwi

44 posts

Geek

Reply # 436202 7-Feb-2011 11:58
I always use static IP's on the local devices, even if they are just workstations. And one important question... Does forwarding port 5060 oppose any increased security threats to my Asterisk box now?

maverick

3442 posts

Uber Geek

Trusted

WorldxChange

Reply # 436247 7-Feb-2011 12:45
you should only be allowing our IP adress to be talking to your box, if not then yes you are more likely to be open to attack and rememeber you are responsible for full security on your box. see this thread http://www.geekzone.co.nz/forums.asp?forumid=65&topicid=65912 Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

nate

3bit.com
5400 posts

Uber Geek

Moderator

Trusted

Subscriber

Reply # 436339 7-Feb-2011 15:40
maverick: you should only be allowing our IP adress to be talking to your box, if not then yes you are more likely to be open to attack and rememeber you are responsible for full security on your box. Having port 5060 open is asking for trouble, you definitely need to lock it down asap. Custom software development \| Mt Eden Cafe \| Gardening Blog \| Gardening.co.nz

1 | 2