[Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI

Tue Jun 16 04:39:46 MSD 2015

Hi All,

Just to make sure I am correct, the profile that SIP trunks register is the external profile, and that profile is listening on :5080?

When I try to call in, on the firewall I see the sip provider sourceip:5060-> destinationip:5080 being forwarded to the box. When I run a tcpdump port 5080 on the box I see nothing hitting it.

[cid:image001.png at 01D0A820.10C3ED80]

root at PBX:/home/pbxadmin# tcpdump port 5080

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes

any ideas?

Thanks, Jackson Fisher

Jackson Fisher   |   Network Engineer  |   02 6162 0070   |   Jackson at forwardit.com.au

-----Original Message-----
From: freeswitch-users-bounces at lists.freeswitch.org [mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of William King
Sent: Tuesday, 16 June 2015 10:12 AM
To: freeswitch-users at lists.freeswitch.org
Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI

Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump.

William King

Senior Engineer

Quentus Technologies, INC

1037 NE 65th St Suite 273

Seattle, WA 98115

Main:   (877) 211-9337

Office: (206) 388-4772

Cell:   (253) 686-5518

william.king at quentustech.com<mailto:william.king at quentustech.com>

On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:

> Hi Moishe,

>

>

>

> Thank you for replying. I have issued the command "sofia profile

> external start" and the service starts successfully, there is no

> iptables installed on the box (debian 7) and I am confident that

> tcp/udp

> 5060-5080 are being forwarded correctly.

>

>

>

> I am tearing my hair out with this one any assistance is greatly

> appreciated.

>

>

>

>

>

> Thanks, Jackson Fisher

>

>

>

> Email-signature.jpg

>

>

>

> * *

>

> *Jackson Fisher*   |   Network Engineer  |   02 6162 0070   |

> _Jackson at forwardit.com.au<mailto:_Jackson at forwardit.com.au> <mailto:Jackson at forwardit.com.au>_

>

>

>

>

>

> *From:*freeswitch-users-bounces at lists.freeswitch.org

> [mailto:freeswitch-users-bounces at lists.freeswitch.org] *On Behalf Of

> *Moishe Grunstein

> *Sent:* Tuesday, 16 June 2015 9:35 AM

> *To:* FreeSWITCH Users Help

> *Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no

> inbound calls hitting FS_CLI

>

>

>

> If you don't see anything in fscli then it is not reaching Freeswitch,

> make sure the profile is started and listening on 5080, if it is the

> issue is outside of Freeswitch either your PFsense or IPtables.

>

>

>

> Thanks,

>

>

>

> Moishe Grunstein

>

> Tornado Computer Systems, Inc.

>

> 212.400.7650 888.IPPBX.US

> *Service Request Email: support at nysolutions.com<mailto:support at nysolutions.com>

> <mailto:support at nysolutions.com> *

>

> cid:image001.jpg at 01C72F94.9EE45D60 <http://www.nysolutions.com/>

>

> Computer Networking * Managed Services * IP Video Surveillance *

> Network Assessments * Web Solutions * Voice over IP * Disaster

> Recovery * Network Security * Site Surveys * CMS

>

>

>

> *From:*freeswitch-users-bounces at lists.freeswitch.org

> <mailto:freeswitch-users-bounces at lists.freeswitch.org>

> [mailto:freeswitch-users-bounces at lists.freeswitch.org] *On Behalf Of

> *Jackson Fisher - Forward.IT

> *Sent:* Monday, June 15, 2015 7:24 PM

> *To:* freeswitch-users at lists.freeswitch.org<mailto:freeswitch-users at lists.freeswitch.org>

> <mailto:freeswitch-users at lists.freeswitch.org>

> *Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound

> calls hitting FS_CLI

>

>

>

> Hi All,

>

>

>

> I am having some issues with a Freeswitch install I am trying to stand

> up. Currently the Freeswitch server is sitting behind a PFsense

> firewall, I have 5060-5080 & 16384 - 32768 forwarded onto the box.

>

>

>

> Sip trunk is registering fine and outbound call work without issue,

> however when I call inbound I see the SIP invite cross the firewall

> destined for :5080 but in fs_cli with external siptrace on I do not

> see any calls connecting.

>

>

>

> Trunk is internode nodephone, and I have set it up following the

> freeswitch guide.

>

>

>

> My end goal is to set up a Multi-tennant system, if that makes a

> difference to any of the config.

>

>

>

> I am pretty new to freeswitch so if anybody could give me any pointers

> on where to start that would be fantastic.

>

>

>

>

>

>

>

>

>

> Thanks, Jackson Fisher

>

>

>

>

>

>

>

> Email-signature.jpg

>

>

>

> *Jackson Fisher**   *|*  *Network Engineer

>

>

>

> A: Level 1 - Unit 8,  55-57 Lathlain Street,  Belconnen ACT 2617

>

> P :(02) 6162 0070

>

> E :*Jackson at forwardit.com.au <mailto:Jackson at forwardit.com.au>*

>

> W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>

>

>

>

>

>

>

>

> ----------------------------------------------------------------------

> --

>

>

> Spam

> Phish/Fraud

> Not spam

> Forget previous vote

>

>

>

> ______________________________________________________________________

> ___ Professional FreeSWITCH Consulting Services:

> consulting at freeswitch.org<mailto:consulting at freeswitch.org>

> http://www.freeswitchsolutions.com

>

> Official FreeSWITCH Sites

> http://www.freeswitch.org

> http://confluence.freeswitch.org

> http://www.cluecon.com

>

> FreeSWITCH-users mailing list

> FreeSWITCH-users at lists.freeswitch.org<mailto:FreeSWITCH-users at lists.freeswitch.org>

> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users

> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use

> rs

> http://www.freeswitch.org

>

_________________________________________________________________________

Professional FreeSWITCH Consulting Services:

consulting at freeswitch.org<mailto:consulting at freeswitch.org>

http://www.freeswitchsolutions.com

Official FreeSWITCH Sites

http://www.freeswitch.org

http://confluence.freeswitch.org

http://www.cluecon.com

FreeSWITCH-users mailing list

FreeSWITCH-users at lists.freeswitch.org<mailto:FreeSWITCH-users at lists.freeswitch.org>

http://lists.freeswitch.org/mailman/listinfo/freeswitch-users

UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users

http://www.freeswitch.org

--

BEGIN-ANTISPAM-VOTING-LINKS

------------------------------------------------------

Teach CanIt if this mail (ID 02OEMeiua) is spam:

Spam:        https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t=20150615&c=s

Fraud/Phish: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t=20150615&c=p

Not spam:    https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t=20150615&c=n

Forget vote: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t=20150615&c=f

------------------------------------------------------

END-ANTISPAM-VOTING-LINKS

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150616/5f35da59/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6722 bytes
Desc: image001.png
Url : http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150616/5f35da59/attachment-0001.png 