Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


93 posts

Master Geek
+1 received by user: 3


Topic # 144160 9-May-2014 10:36
Send private message

I've moved my Raspberry PBX to a VMWare VM PBX using PBX in a Flash. So far so good - I've got inter-extension calling, outgoing calling etc working great, however I am not able to get incoming calls working, despite replicating settings in the webGUI exactly what my old RaspBX was setup as.

I've got the following ports forwarded to my PBX in a Flash VM

     

  1. 10000 - 20000 TCP & UDP
  2. 5000 - 5500 TCP & UDP

And yet when I tail the asterisk logs with maximum verbosity and make a call from my cell to my number, I get "the party you are trying to reach is unavaialble". At the same time I'm not seeing anything at all in the asterisk logs at all (as in the system is completely idle). I believe if the issue was with my inbound routes or something like that I'd see something in there.

At this point it looks like WxC's end is unable to reach my PBX at all. On closer look at the PBX, I am getting a "STATUS = REQUEST SENT" for SIP registration, and not "REGISTERED" as it should show. What gives?

Create new topic
266 posts

Ultimate Geek
+1 received by user: 26


  Reply # 1040727 9-May-2014 11:15
Send private message

PM me your IP or Phone number and I'll see what's happening.



93 posts

Master Geek
+1 received by user: 3


  Reply # 1040776 9-May-2014 12:35
Send private message

Done -- cheers!

266 posts

Ultimate Geek
+1 received by user: 26


  Reply # 1040790 9-May-2014 12:46
Send private message

Actually seeing the INVITE's from WXC to your endpoint time out (pm'd you a ladder map). If your ASTERISK box is not seeing the inbound invite at all i'd look upstream from that to make sure that your router/nat is passing the traffic properly. The INVITE is sent over port 5060 to your end. Can your router see anything passed over this port ? May also pay to look at disabling SIP ALG on your router if it has it as a feature.

What is your setup ?



93 posts

Master Geek
+1 received by user: 3


  Reply # 1040861 9-May-2014 14:54
Send private message

Hi,

I'm running a pfSense and to the best of my knowledge there is no SIP/NAT ALG features in it.

Here's a topology diagram: http://i.snag.gy/d0fZN.jpg

And here's a screenshot of my port forwards: http://i.snag.gy/9f2p2.jpg

266 posts

Ultimate Geek
+1 received by user: 26


  Reply # 1040869 9-May-2014 15:02
Send private message

That looks good as far as I can tell.

Perhaps go over this page to see if any of the information there will help :

https://doc.pfsense.org/index.php/VoIP_Configuration

Or rather this may be more helpful :

https://doc.pfsense.org/index.php/Asterisk_VoIP

26465 posts

Uber Geek
+1 received by user: 6021

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1040891 9-May-2014 15:36
Send private message

You should never under any circumstances have any port forwards for SIP. It's not a matter of if you'll get hacked, it's when.

If you can't explain why you need them, you don't.. smile

3343 posts

Uber Geek
+1 received by user: 1089

Trusted
Vocus

  Reply # 1040893 9-May-2014 15:38
Send private message

Indeed, at least pin those rules down to the proxy/sbc addresses of your chosen provider...



93 posts

Master Geek
+1 received by user: 3


  Reply # 1040942 9-May-2014 17:14
Send private message

Ok I finally got the SIP trunk "registered", inbound calls work.

Fixed it by enabling static port mapping: http://i.snag.gy/zIQ38.jpg

And I'm aware that having 5060 forwared to the world is dangerous, I was just doing it in testing.

8025 posts

Uber Geek
+1 received by user: 387

Trusted
Subscriber

  Reply # 1041759 11-May-2014 16:32
Send private message

Looks like you figured it out, yes in pfsense you need to enable static mapping, in other devices/software it's often called consistent NAT or 1:1 NAT.

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

N4L helping TAKA Trust bridge the digital divide for Lower Hutt students
Posted 18-Jun-2018 13:08


Winners Announced for 2018 CIO Awards
Posted 18-Jun-2018 13:03


Logitech Rally sets new standard for USB-connected video conference cameras
Posted 18-Jun-2018 09:27


Russell Stanners steps down as Vodafone NZ CEO
Posted 12-Jun-2018 09:13


Intergen recognised as 2018 Microsoft Country Partner of the Year for New Zealand
Posted 12-Jun-2018 08:00


Finalists Announced For Microsoft NZ Partner Awards
Posted 6-Jun-2018 15:12


Vocus Group and Vodafone announce joint venture to accelerate fibre innovation
Posted 5-Jun-2018 10:52


Kogan.com to launch Kogan Mobile in New Zealand
Posted 4-Jun-2018 14:34


Enable doubles fibre broadband speeds for its most popular wholesale service in Christchurch
Posted 2-Jun-2018 20:07


All or Nothing: New Zealand All Blacks arrives on Amazon Prime Video
Posted 2-Jun-2018 16:21


Innovation Grant, High Tech Awards and new USA office for Kiwi tech company SwipedOn
Posted 1-Jun-2018 20:54


Commerce Commission warns Apple for misleading consumers about their rights
Posted 30-May-2018 13:15


IBM leads Call for Code to use cloud, data, AI, blockchain for natural disaster relief
Posted 25-May-2018 14:12


New FUJIFILM X-T100 aims to do better job than smartphones
Posted 24-May-2018 20:17


Stuff takes 100% ownership of Stuff Fibre
Posted 24-May-2018 19:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.