Call for help - adding information to the wiki: SIP ALG's
Hi all, I've just completed a new wiki page: http://wiki.freeswitch.org/wiki/ALG I would like all of you who have dealt with routers with SIP ALG's to submit your input. I would like to see this page have a list of how-to's for all of the popular routers. If we can make it easy for people to disable SIP ALG's then I think we can all save ourselves time and energy answering questions in IRC and the mailing lists. Please by all means add your knowledge here. I started with the 2wire 3800HGV that I got for my ATT Uverse service. If you have knowledge that you like to add to the wiki (on this subject or any other) but are not confident in your wiki editing skills then contact me off list and I will be happy to help you get up to speed. Editing your first wiki page is always the hardest... :) Thanks again for all of your help! By the way, today's community conference call was great. Please plan on attending next week and we'll talk about more great FreeSWITCH stuff. I will have the recording of Rupa discussing mod_limit up on line as soon as I can. Take care, Michael
Michael Collins <msc@freeswitch.org> wrote:
I've just completed a new wiki page:
http://wiki.freeswitch.org/wiki/ALG
I would like all of you who have dealt with routers with SIP ALG's to submit your input. I would like to see this page have a list of how-to's for all of the popular routers. If we can make it easy for people to disable SIP ALG's then I think we can all save ourselves time and energy answering questions in IRC and the mailing lists. Please by all means add your knowledge here.
For Cisco IOS, the following commands do it: no ip nat service sip tcp port 5060 no ip nat service sip udp port 5060 Regrettably I'm not in a position to edit the wiki, but anyone is welcome to add the above.
I can think of several devices that have serious SIP ALG issues, I'll spend the time and add some of the devices I know about. Do you want to limit the page to SIP ALG problems or anything entirely stupid that routers seem to do that could possibly break VoIP? For example, we've found several routers with broken DNS resolvers/forwarders that don't know how to deal with SRV records, in particular routers that run VxWorks internally. People relying on routers running VxWorks to resolve SRV records could bang their head on the wall trying to figure out why nothing is working, unless they manually configure their devices to use other DNS servers (Stinksys' newer G and N routers running VxWorks comes to mind). Cheers, Gabe On Wed, Feb 24, 2010 at 8:08 PM, Michael Collins <msc@freeswitch.org> wrote:
Hi all,
I've just completed a new wiki page:
http://wiki.freeswitch.org/wiki/ALG
I would like all of you who have dealt with routers with SIP ALG's to submit your input. I would like to see this page have a list of how-to's for all of the popular routers. If we can make it easy for people to disable SIP ALG's then I think we can all save ourselves time and energy answering questions in IRC and the mailing lists. Please by all means add your knowledge here. I started with the 2wire 3800HGV that I got for my ATT Uverse service.
If you have knowledge that you like to add to the wiki (on this subject or any other) but are not confident in your wiki editing skills then contact me off list and I will be happy to help you get up to speed. Editing your first wiki page is always the hardest... :)
Thanks again for all of your help! By the way, today's community conference call was great. Please plan on attending next week and we'll talk about more great FreeSWITCH stuff. I will have the recording of Rupa discussing mod_limit up on line as soon as I can.
Take care, Michael
_______________________________________________ FreeSWITCH-dev mailing list FreeSWITCH-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev http://www.freeswitch.org
I had an issue with a Thomson SpeedTouch 530 router that was causing authentication to fail... its the thread titled 'Forbidden using UDP, works with TCP/TLS' that everyone said was caused by a broken ATA ... lucky no one chipped in so I could buy a new one (as suggested by Anthony) - it wouldn't have helped because the router was broken and modifying the authentication parameters! I'll update the wiki with the info On Thu, Feb 25, 2010 at 5:48 PM, Gabriel Kuri <gkuri@ieee.org> wrote:
I can think of several devices that have serious SIP ALG issues, I'll spend the time and add some of the devices I know about.
Do you want to limit the page to SIP ALG problems or anything entirely stupid that routers seem to do that could possibly break VoIP? For example, we've found several routers with broken DNS resolvers/forwarders that don't know how to deal with SRV records, in particular routers that run VxWorks internally. People relying on routers running VxWorks to resolve SRV records could bang their head on the wall trying to figure out why nothing is working, unless they manually configure their devices to use other DNS servers (Stinksys' newer G and N routers running VxWorks comes to mind).
Cheers, Gabe
On Wed, Feb 24, 2010 at 8:08 PM, Michael Collins <msc@freeswitch.org> wrote:
Hi all,
I've just completed a new wiki page:
http://wiki.freeswitch.org/wiki/ALG
I would like all of you who have dealt with routers with SIP ALG's to submit your input. I would like to see this page have a list of how-to's for all of the popular routers. If we can make it easy for people to disable SIP ALG's then I think we can all save ourselves time and energy answering questions in IRC and the mailing lists. Please by all means add your knowledge here. I started with the 2wire 3800HGV that I got for my ATT Uverse service.
If you have knowledge that you like to add to the wiki (on this subject or any other) but are not confident in your wiki editing skills then contact me off list and I will be happy to help you get up to speed. Editing your first wiki page is always the hardest... :)
Thanks again for all of your help! By the way, today's community conference call was great. Please plan on attending next week and we'll talk about more great FreeSWITCH stuff. I will have the recording of Rupa discussing mod_limit up on line as soon as I can.
Take care, Michael
_______________________________________________ FreeSWITCH-dev mailing list FreeSWITCH-dev@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-dev UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-dev http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I believe all SIP ALG's are broken. :P /b On Feb 25, 2010, at 2:43 AM, Mark Campbell-Smith wrote:
I had an issue with a Thomson SpeedTouch 530 router that was causing authentication to fail... its the thread titled 'Forbidden using UDP, works with TCP/TLS' that everyone said was caused by a broken ATA ... lucky no one chipped in so I could buy a new one (as suggested by Anthony) - it wouldn't have helped because the router was broken and modifying the authentication parameters!
I'll update the wiki with the info
I wish you would have told me that back when I was trying to solve my authentication issue that I thought was being caused by using rport. :P You just told me to upgrade to 1.0.5, when a $%$#! Sonicwall SIP ALG would have been more helpful, haha. As it turned out it was the Sonicwall SIP transformations, and switching to TCP SIP resolved it. I have added my Sonicwall experience to the wiki page. -Adam -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Thursday, February 25, 2010 6:33 AM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] [Freeswitch-dev] Call for help - adding information to the wiki: SIP ALG's I believe all SIP ALG's are broken. :P /b On Feb 25, 2010, at 2:43 AM, Mark Campbell-Smith wrote:
I had an issue with a Thomson SpeedTouch 530 router that was causing authentication to fail... its the thread titled 'Forbidden using UDP, works with TCP/TLS' that everyone said was caused by a broken ATA ... lucky no one chipped in so I could buy a new one (as suggested by Anthony) - it wouldn't have helped because the router was broken and modifying the authentication parameters!
I'll update the wiki with the info
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Gents, Thanks for all of your input on this. I see a few more entries on the ALG wiki page and that is exactly what I had hoped to see. Please keep up the good work. Thanks, MC On Thu, Feb 25, 2010 at 9:26 AM, Adam Ford <lists@redbonez.net> wrote:
I wish you would have told me that back when I was trying to solve my authentication issue that I thought was being caused by using rport. :P
You just told me to upgrade to 1.0.5, when a $%$#! Sonicwall SIP ALG would have been more helpful, haha. As it turned out it was the Sonicwall SIP transformations, and switching to TCP SIP resolved it.
I have added my Sonicwall experience to the wiki page.
-Adam
-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Thursday, February 25, 2010 6:33 AM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] [Freeswitch-dev] Call for help - adding information to the wiki: SIP ALG's
I believe all SIP ALG's are broken. :P
/b
On Feb 25, 2010, at 2:43 AM, Mark Campbell-Smith wrote:
I had an issue with a Thomson SpeedTouch 530 router that was causing authentication to fail... its the thread titled 'Forbidden using UDP, works with TCP/TLS' that everyone said was caused by a broken ATA ... lucky no one chipped in so I could buy a new one (as suggested by Anthony) - it wouldn't have helped because the router was broken and modifying the authentication parameters!
I'll update the wiki with the info
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
well .. thats a know thing.. SIP ALG is to be disabled on every router as this is not the way NAT traversal is donoe for SIP... This is something a border element (SBC) on carrier side has to deal with. If some "intelligent" router thinks it can "fix" the translation it actually screws it from the border element perspective and you will end up with either failed call establishment or without audio. I had a device (zxyel) that was using SIP ALG (hiden command that was available via telnet only) and everything was fine for a while ... but after some time my single device behnd NAT was not able to register to the proviser because of a broken branch string. so, just disable ALG for SIP on ALL devices you have on customer side .. it really doesn't have any sense to keep it on. T. On Thu, Feb 25, 2010 at 8:58 PM, Michael Collins <msc@freeswitch.org> wrote:
Gents, Thanks for all of your input on this. I see a few more entries on the ALG wiki page and that is exactly what I had hoped to see. Please keep up the good work.
Thanks, MC
On Thu, Feb 25, 2010 at 9:26 AM, Adam Ford <lists@redbonez.net> wrote:
I wish you would have told me that back when I was trying to solve my authentication issue that I thought was being caused by using rport. :P
You just told me to upgrade to 1.0.5, when a $%$#! Sonicwall SIP ALG would have been more helpful, haha. As it turned out it was the Sonicwall SIP transformations, and switching to TCP SIP resolved it.
I have added my Sonicwall experience to the wiki page.
-Adam
-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Thursday, February 25, 2010 6:33 AM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] [Freeswitch-dev] Call for help - adding information to the wiki: SIP ALG's
I believe all SIP ALG's are broken. :P
/b
On Feb 25, 2010, at 2:43 AM, Mark Campbell-Smith wrote:
I had an issue with a Thomson SpeedTouch 530 router that was causing authentication to fail... its the thread titled 'Forbidden using UDP, works with TCP/TLS' that everyone said was caused by a broken ATA ... lucky no one chipped in so I could buy a new one (as suggested by Anthony) - it wouldn't have helped because the router was broken and modifying the authentication parameters!
I'll update the wiki with the info
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (7)
-
Adam Ford
-
Brian West
-
Gabriel Kuri
-
Jason White
-
Mark Campbell-Smith
-
Michael Collins
-
Tihomir Culjaga