<div dir="ltr">My router was configured wrong. The MTU size was set incorrectly. This resulted in strange dropouts. Some things, e.g. websites worked and others didn't answer. That was a nasty mistake. That took me ages to figure out.<br><br>Right now I'm connecting with siproxd to the outside. Unfortunately siproxd does not support DNS SRV. Does anyone have another idea how I make my installation work without forwarding ports in the firewall? <br><br>I already read the NAT descriptions in the documentation. But many of the settings don't tell me anything and the description is not very understandable.<br><br>Setup:<br>Phone -> FS -> NAT -> Gateway.<br><br></div><div class="gmail_extra"><br><div class="gmail_quote">2018-07-02 10:44 GMT+02:00 Paul Muaddib <span dir="ltr"><<a href="mailto:paul.muaddib83@gmail.com" target="_blank">paul.muaddib83@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Now, I opened all firewall ports. I tried connecting to different SIP Servers with Netcat and it established a connection. But I don't get any response.</div><div>I read the Technical Specification 1TR118 from Deutsche Telekom and change the gateway setting according to the specifications but no success ;(<br></div><div><br></div><div><include></div> <gateway name="<a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a>"><br> <param name="username" value="XXXXXXXX"/><br> <param name="password" value="XXXXXXXXX"/><span class=""><br><br> <param name="realm" value="<a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a>"/><br> <param name="proxy" value="<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.<wbr>de</a>"/><br><br> <param name="register" value="true"/><br> <param name="register-transport" value="tcp"/><br></span> <param name="expire-seconds" value="500"/><br> <param name="from-user" value="my_phonenumber"/><br> <param name="from-domain" value="<a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a>"/><br> <param name="extension" value="my_phonenumber"/><br> <param name="extension-in-contact" value="true"/><br><br> </gateway><br></include><br><br></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2018-06-30 22:57 GMT+02:00 Paul Muaddib <span dir="ltr"><<a href="mailto:paul.muaddib83@gmail.com" target="_blank">paul.muaddib83@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>sofia loglevel all 9</div><div><br></div><div>##############################<wbr>##############################<wbr>#########<br></div><div><br></div><div>2018-06-30 22:31:43.746032 [NOTICE] sofia_reg.c:448 Registering <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a><br>nua.c:622 nua_register() nua: nua_register: entering<br>nua_stack.c:529 nua_signal() nua(0xb4e2ec50): sent signal r_register<br>nua_stack.c:569 nua_stack_signal() nua(0xb4e2ec50): recv signal r_register<br>nua_params.c:480 nua_stack_set_params() nua: nua_stack_set_params: entering<br>soa.c:280 soa_clone() soa_clone(static::0xb6255520, 0x88b30b0, 0xb4e2ec50) called<br>soa.c:403 soa_set_params() soa_set_params(static::0xb5923<wbr>410, ...) called<br>soa.c:403 soa_set_params() soa_set_params(static::0xb5923<wbr>410, ...) called<br>nua_dialog.c:338 nua_dialog_usage_add() nua(0xb4e2ec50): adding register usage<br>nta.c:4417 nta_leg_tcreate() nta_leg_tcreate(0xb5906508)<br>nta.c:2665 nta_tpn_by_url() nta: selecting scheme sip<br>sres_cache.c:272 sres_cache_get() sres_cache_get(0x88aa8e0, SRV, "_sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.telek<wbr>om.de</a>.") called<br>sres_cache.c:318 sres_cache_get() sres_cache_get(0x88aa8e0, SRV, "_sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.telek<wbr>om.de</a>.") returned 3 entries<br>nta.c:10598 outgoing_query_srv() nta: for "<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>" query "_sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.telek<wbr>om.de</a>" SRV (cached)<br>nta.c:10694 outgoing_answer_srv() nta: _sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.teleko<wbr>m.de</a> IN SRV 10 5 5060 <a href="http://d-ipr-a02.sip-trunk.telekom.de" target="_blank">d-ipr-a02.sip-trunk.telekom.de</a><wbr>. (tcp)<br>nta.c:10694 outgoing_answer_srv() nta: _sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.teleko<wbr>m.de</a> IN SRV 11 5 5060 <a href="http://b-ipr-a01.sip-trunk.telekom.de" target="_blank">b-ipr-a01.sip-trunk.telekom.de</a><wbr>. (tcp)<br>nta.c:10694 outgoing_answer_srv() nta: _sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.teleko<wbr>m.de</a> IN SRV 11 5 5060 <a href="http://b-ipr-a02.sip-trunk.telekom.de" target="_blank">b-ipr-a02.sip-trunk.telekom.de</a><wbr>. (tcp)<br>sres_cache.c:272 sres_cache_get() sres_cache_get(0x88aa8e0, A, "<a href="http://d-ipr-a02.sip-trunk.telekom.de" target="_blank">d-ipr-a02.sip-trunk.telekom.d<wbr>e</a>.") called<br>sres_cache.c:318 sres_cache_get() sres_cache_get(0x88aa8e0, A, "<a href="http://d-ipr-a02.sip-trunk.telekom.de" target="_blank">d-ipr-a02.sip-trunk.telekom.d<wbr>e</a>.") returned 1 entries<br>nta.c:10803 outgoing_query_a() nta: for "<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>" query "<a href="http://d-ipr-a02.sip-trunk.telekom.de" target="_blank">d-ipr-a02.sip-trunk.telekom.d<wbr>e</a>." A (cached)<br>nta.c:10856 outgoing_answer_a() nta: <a href="http://d-ipr-a02.sip-trunk.telekom.de" target="_blank">d-ipr-a02.sip-trunk.telekom.de</a><wbr>. IN A 217.0.26.133<br>tport.c:4588 tport_by_name() tport(0xb625dc58): found 0x880d978 by name tcp/<a href="http://217.0.26.133:5060" target="_blank">217.0.26.133:5060</a><br>tport.c:3257 tport_tsend() tport_tsend(0x880d978) tpn = tcp/<a href="http://217.0.26.133:5060" target="_blank">217.0.26.133:5060</a><br>tport.c:3594 tport_vsend() tport_vsend(0x880d978): 677 bytes of 677 to tcp/<a href="http://217.0.26.133:5060" target="_blank">217.0.26.133:5060</a><br>tport.c:3492 tport_send_msg() tport_vsend returned 677<br>tport.c:2296 tport_set_secondary_timer() tport(0x880d978): reset timer<br>nta.c:8304 outgoing_send() nta: sent REGISTER (124859287) to tcp/<a href="http://217.0.26.133:5060" target="_blank">217.0.26.133:5060</a><br>tport.c:4160 tport_pend() tport_pend(0x880d978): pending 0xb6263a08 for tcp/<a href="http://217.0.26.133:5060" target="_blank">217.0.26.133:5060</a> (already 1)<br>nta.c:8982 outgoing_timer_bf() nta: timer F fired, timeout REGISTER (124859241)<br>nta.c:9035 outgoing_timeout() nta(0xb6264318): try next after timeout<br>nta.c:10200 outgoing_graylist() nta: graylisting <a href="http://d-ipr-a02.sip-trunk.telekom.de">d-ipr-a02.sip-trunk.telekom.de</a><wbr>.:5060;transport=tcp<br>nta.c:10227 outgoing_graylist() nta: reduced priority of 1 _sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.teleko<wbr>m.de</a> SRV records (increase value to 11)<br>sres_cache.c:272 sres_cache_get() sres_cache_get(0x88aa8e0, A, "<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>.") called<br>nta.c:10803 outgoing_query_a() nta: for "<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>" query "<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>" A<br>sres.c:968 sres_query() sres_query(0xb624a8b8, 0xb6264318, A, "<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>") called<br>sres.c:2730 sres_send_dns_query() sres_send_dns_query(0xb624a8b8<wbr>, 0x88653d0) called<br>sres.c:2819 sres_send_dns_query() sres_send_dns_query(0xb624a8b8<wbr>, 0x88653d0) id=12982 A <a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a> (to [217.237.148.70]:53)<br>nta.c:8929 _nta_outgoing_timer() nta_outgoing_timer: 0/0 resent, 1/2 tout, 0/0 term, 0/2 free<br>nta.c:1296 agent_timer() nta: timer set next to 29536 ms<br>sres.c:3467 sres_resolver_receive() sres_resolver_receive(0xb624a8<wbr>b8, 31) called<br>sres.c:3781 sres_create_record() AUTHORITY RR received <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a>. SOA IN 151 rdlen=64<br>sres.c:3572 sres_log_response() sres_resolver_receive(0xb624a8<wbr>b8, 0x88653d0) id=12982 (from [217.237.148.70]:53)<br>sres.c:2987 sres_query_report_error() sres(q=0x88653d0): reporting error RECORD_ERR for A <a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a><br>tport.c:4222 tport_release() tport_release(0x880d978): 0xb623b2e8 by 0xb6264318 with (nil)<br>nta.c:8722 outgoing_free() nta: outgoing_free(0xb6264318)<br>nta.c:8982 outgoing_timer_bf() nta: timer F fired, timeout REGISTER (124859287)<br>nta.c:9035 outgoing_timeout() nta(0xb628fb30): try next after timeout<br>nta.c:10200 outgoing_graylist() nta: graylisting <a href="http://d-ipr-a02.sip-trunk.telekom.de">d-ipr-a02.sip-trunk.telekom.de</a><wbr>.:5060;transport=tcp<br>nta.c:10227 outgoing_graylist() nta: reduced priority of 1 _sip._<a href="http://tcp.reg.sip-trunk.telekom.de" target="_blank">tcp.reg.sip-trunk.teleko<wbr>m.de</a> SRV records (increase value to 12)<br>sres_cache.c:272 sres_cache_get() sres_cache_get(0x88aa8e0, A, "<a href="http://b-ipr-a01.sip-trunk.telekom.de" target="_blank">b-ipr-a01.sip-trunk.telekom.d<wbr>e</a>.") called<br>sres_cache.c:318 sres_cache_get() sres_cache_get(0x88aa8e0, A, "<a href="http://b-ipr-a01.sip-trunk.telekom.de" target="_blank">b-ipr-a01.sip-trunk.telekom.d<wbr>e</a>.") returned 1 entries<br>nta.c:10803 outgoing_query_a() nta: for "<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>" query "<a href="http://b-ipr-a01.sip-trunk.telekom.de" target="_blank">b-ipr-a01.sip-trunk.telekom.d<wbr>e</a>." A (cached)<br>nta.c:10856 outgoing_answer_a() nta: <a href="http://b-ipr-a01.sip-trunk.telekom.de" target="_blank">b-ipr-a01.sip-trunk.telekom.de</a><wbr>. IN A 217.0.26.163<br>tport.c:4588 tport_by_name() tport(0xb625dc58): found 0x87fa8a8 by name tcp/<a href="http://217.0.26.163:5060" target="_blank">217.0.26.163:5060</a><br>tport.c:4222 tport_release() tport_release(0x880d978): 0xb6263a08 by 0xb628fb30 with (nil)<br>tport.c:2296 tport_set_secondary_timer() tport(0x880d978): reset timer<br>tport.c:3257 tport_tsend() tport_tsend(0x87fa8a8) tpn = tcp/<a href="http://217.0.26.163:5060" target="_blank">217.0.26.163:5060</a><br>tport.c:3594 tport_vsend() tport_vsend(0x87fa8a8): 677 bytes of 677 to tcp/<a href="http://217.0.26.163:5060" target="_blank">217.0.26.163:5060</a><br>tport.c:3492 tport_send_msg() tport_vsend returned 677<br>tport.c:2296 tport_set_secondary_timer() tport(0x87fa8a8): reset timer<br>nta.c:8304 outgoing_send() nta: sent REGISTER (124859287) to tcp/<a href="http://217.0.26.163:5060" target="_blank">217.0.26.163:5060</a><br>tport.c:4160 tport_pend() tport_pend(0x87fa8a8): pending 0xb6263a08 for tcp/<a href="http://217.0.26.163:5060" target="_blank">217.0.26.163:5060</a> (already 0)<br>nta.c:8929 _nta_outgoing_timer() nta_outgoing_timer: 0/0 resent, 1/1 tout, 0/0 term, 0/1 free<br>nta.c:1296 agent_timer() nta: timer set next to 32000 ms<br>2018-06-30 22:32:44.083197 [WARNING] sofia_reg.c:484 Timeout Registering <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a><br>nua.c:921 nua_handle_destroy() nua: nua_handle_destroy: entering<br>nua_stack.c:569 nua_stack_signal() nua(0xb4e2ec50): recv signal r_destroy<br>nua_dialog.c:397 nua_dialog_usage_remove_at() nua(0xb4e2ec50): removing register usage<br>nta.c:4470 nta_leg_destroy() nta_leg_destroy(0xb5906508)<br>soa.c:356 soa_destroy() soa_destroy(static::0xb5923410<wbr>) called<br>nua_stack.c:529 nua_signal() nua(0xb4e2ec50): sent signal r_destroy<br>2018-06-30 22:32:45.123287 [WARNING] sofia_reg.c:505 <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a> Failed Registration [908], setting retry to 30 seconds.</div><div><br></div><div>##############################<wbr>##############################<wbr>#################<br></div></div><div class="m_-3501431580679690642HOEnZb"><div class="m_-3501431580679690642h5"><div class="gmail_extra"><br><div class="gmail_quote">2018-06-30 14:18 GMT+02:00 Paul Muaddib <span dir="ltr"><<a href="mailto:paul.muaddib83@gmail.com" target="_blank">paul.muaddib83@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi,</div><div><br></div>can someone please look at it and tell my what I am doing wrong?<br><br>NOTICE] sofia_reg.c:448 Registering <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a><br>[WARNING] sofia_reg.c:484 Timeout Registering <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a><br>[WARNING] sofia_reg.c:505 <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a> Failed Registration [908], setting retry to 30 seconds.<br><br>My setup:<br>########<br><br>I have a static IP address for my router. My router does not have UPnP or NAT-PMP.<br>Phones and Freeswitch server are on the same local network. The local network is behind NAT<br><br>PHONE -> FS -> NAT -> Public Internet <br>I only want to connect to the PSTN via my sip gateway provider. <br><br>According to this manual I did the following setting:<br><a href="https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal" target="_blank">https://freeswitch.org/conflue<wbr>nce/display/FREESWITCH/NAT+Tra<wbr>versal</a><br><br>vars.xml<br>######<br><br><X-PRE-PROCESS cmd="set" data="external_rtp_ip=X.X.X.X“<wbr>/><br><X-PRE-PROCESS cmd="set" data="external_sip_ip=X.X.X.X"<wbr>/><br><br>internal.xml<br>#########<br><br><param name="ext-rtp-ip" value="$${external_rtp_ip}"/> <br><br>external.xml<br>##########<br><br><param name="ext-sip-ip" value="$${external_sip_ip}"/><br><param name="ext-rtp-ip" value="$${external_rtp_ip}"/> <br><br><div>( What is a little bit strange though is that nat_map status is not working</div>[ERR] mod_commands.c:751 nat_map API called while NAT not initialized )<br><br><div>Is the reason why it does not work the port specification in the Contact field (sngrep output)?<br></div><div>Contact: <sip:gw+sip-trunk.telekom.de@X<wbr>.X.X.X:5080;transport=tcp;gw=<a href="http://sip-trunk.telekom.de" target="_blank">s<wbr>ip-trunk.telekom.de</a>></div><div><br></div>I do not want to setup port forwarding in the firewall. The connection should remain open via a keep alive signal.<br><br>sngrep output<br>###########<br><br>2018/06/30 13:52:37.211946 <a href="http://10.0.200.2:51813" target="_blank">10.0.200.2:51813</a> -> <a href="http://217.0.26.165:5060" target="_blank">217.0.26.165:5060</a><br>REGISTER sip:<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a>;t<wbr>ransport=tcp SIP/2.0<br>Via: SIP/2.0/TCP X.X.X.X:5080;rport;branch=z2hG<wbr>4bK588cZXSvrN1De<br>Max-Forwards: 70<br>From: <<a href="mailto:sip%3Ausername@reg.sip-trunk.telekom.de" target="_blank">sip:username@reg.sip-trunk.te<wbr>lekom.de</a>>;tag=9aldsj8n67a<br>To: <<a href="mailto:sip%3Ausername@reg.sip-trunk.telekom.de" target="_blank">sip:username@reg.sip-trunk.te<wbr>lekom.de</a>><br>Call-ID: <br>CSeq: 111844514 REGISTER<br>Contact: <sip:gw+sip-trunk.telekom.de@X<wbr>.X.X.X:5080;transport=tcp;gw=<a href="http://sip-trunk.telekom.de" target="_blank">s<wbr>ip-trunk.telekom.de</a>><br>Expires: 3600<br>User-Agent: FreeSWITCH-mod_sofia/1.6.19+gi<wbr>t~20170927T175834Z~38f568d343~<wbr>32bit<br>Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY<br>Supported: timer, path, replaces<br>Content-Length: 0<br><br>Provider settings:<br>#############<br><br>output proxy: <a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.de</a><br>registrar: <a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a><br><br>sip_profiles/external/telekom_<wbr>voip.xml<br>##############################<br><br><include><br><br> <gateway name="<a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a>"><br> <param name="username" value=„XXXXXX“/><br> <param name="password" value=„XXXXXX“/><br><br> <param name="realm" value="<a href="http://sip-trunk.telekom.de" target="_blank">sip-trunk.telekom.de</a>"/><br> <param name="proxy" value="<a href="http://reg.sip-trunk.telekom.de" target="_blank">reg.sip-trunk.telekom.d<wbr>e</a>"/><br> <param name="register" value="true"/><br> <param name="register-transport" value="tcp"/><br> <param name="expire-seconds" value="3600"/><br><br> </gateway><br></include><br><br>Firewall settings<br>#############<br><br># block all traffic in all directions<br>block log<br><br># loopback interface is not filtered<br>set skip on lo0<br><br>voip_tcp_client_out = "{ssh, ftp, domain, http, https, sip}"<br>voip_udp_client_out = "{domain, ntp, sip, 3478}"<br><br>match out on $wan_if from any nat-to ($wan_if)<br><br>pass on $voip_if inet proto tcp from any to port $voip_tcp_client_out<br>pass on $voip_if inet proto udp from any to port $voip_udp_client_out<br><br>pass out on $wan_if inet proto tcp from any to port $tcp_client_out<br>pass out on $wan_if inet proto udp from any to port $udp_client_out<br><br><br>Thank you for helping :)<br><br>Regards,<br>Paul<br><br><br></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>