Don't change the port like that on nat mapping. One to one nat mapping are key. Also is this you? https://www.reddit.com/r/VOIP/comments/39ynue/freeswitch_behind_nat_no_incom... On Monday, June 15, 2015, Jackson Fisher - Forward.IT < jackson@forwardit.com.au> wrote:
Hi All,
Just to make sure I am correct, the profile that SIP trunks register is the external profile, and that profile is listening on :5080?
When I try to call in, on the firewall I see the sip provider sourceip:5060-> destinationip:5080 being forwarded to the box. When I run a tcpdump port 5080 on the box I see nothing hitting it.
root@PBX:/home/pbxadmin# tcpdump port 5080
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
any ideas?
Thanks, Jackson Fisher
Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>
-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');> [mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] On Behalf Of William King Sent: Tuesday, 16 June 2015 10:12 AM To: freeswitch-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');> Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI
Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump.
William King
Senior Engineer
Quentus Technologies, INC
1037 NE 65th St Suite 273
Seattle, WA 98115
Main: (877) 211-9337
Office: (206) 388-4772
Cell: (253) 686-5518
william.king@quentustech.com <javascript:_e(%7B%7D,'cvml','william.king@quentustech.com');>
On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:
Hi Moishe,
Thank you for replying. I have issued the command “sofia profile
external start” and the service starts successfully, there is no
iptables installed on the box (debian 7) and I am confident that
tcp/udp
5060-5080 are being forwarded correctly.
I am tearing my hair out with this one any assistance is greatly
appreciated.
Thanks, Jackson Fisher
Email-signature.jpg
* *
*Jackson Fisher* | Network Engineer | 02 6162 0070 |
_Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','_Jackson@forwardit.com.au');> < mailto:Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>_
*From:*freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
[mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Moishe Grunstein
*Sent:* Tuesday, 16 June 2015 9:35 AM
*To:* FreeSWITCH Users Help
*Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no
inbound calls hitting FS_CLI
If you don’t see anything in fscli then it is not reaching Freeswitch,
make sure the profile is started and listening on 5080, if it is the
issue is outside of Freeswitch either your PFsense or IPtables.
Thanks,
Moishe Grunstein
Tornado Computer Systems, Inc.
212.400.7650 888.IPPBX.US
*Service Request Email: support@nysolutions.com <javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>
<mailto:support@nysolutions.com <javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>> *
cid:image001.jpg@01C72F94.9EE45D60 <http://www.nysolutions.com/>
Computer Networking * Managed Services * IP Video Surveillance *
Network Assessments * Web Solutions * Voice over IP * Disaster
Recovery * Network Security * Site Surveys * CMS
*From:*freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
<mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
[mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Jackson Fisher - Forward.IT
*Sent:* Monday, June 15, 2015 7:24 PM
*To:* freeswitch-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>
<mailto:freeswitch-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>>
*Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound
calls hitting FS_CLI
Hi All,
I am having some issues with a Freeswitch install I am trying to stand
up. Currently the Freeswitch server is sitting behind a PFsense
firewall, I have 5060-5080 & 16384 – 32768 forwarded onto the box.
Sip trunk is registering fine and outbound call work without issue,
however when I call inbound I see the SIP invite cross the firewall
destined for :5080 but in fs_cli with external siptrace on I do not
see any calls connecting.
Trunk is internode nodephone, and I have set it up following the
freeswitch guide.
My end goal is to set up a Multi-tennant system, if that makes a
difference to any of the config.
I am pretty new to freeswitch so if anybody could give me any pointers
on where to start that would be fantastic.
Thanks, Jackson Fisher
Email-signature.jpg
*Jackson Fisher** *|* *Network Engineer
A: Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617
P :(02) 6162 0070
E :*Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');> < mailto:Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>*
W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>
----------------------------------------------------------------------
--
Spam
Phish/Fraud
Not spam
Forget previous vote
______________________________________________________________________
___ Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');>
Official FreeSWITCH Sites
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
rs
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');>
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://confluence.freeswitch.org
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
--
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------
Teach CanIt if this mail (ID 02OEMeiua) is spam:
Spam: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
Fraud/Phish: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
Not spam: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
Forget vote: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
