Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI
Hi All, I am having some issues with a Freeswitch install I am trying to stand up. Currently the Freeswitch server is sitting behind a PFsense firewall, I have 5060-5080 & 16384 - 32768 forwarded onto the box. Sip trunk is registering fine and outbound call work without issue, however when I call inbound I see the SIP invite cross the firewall destined for :5080 but in fs_cli with external siptrace on I do not see any calls connecting. Trunk is internode nodephone, and I have set it up following the freeswitch guide. My end goal is to set up a Multi-tennant system, if that makes a difference to any of the config. I am pretty new to freeswitch so if anybody could give me any pointers on where to start that would be fantastic. Thanks, Jackson Fisher [Email-signature.jpg] Jackson Fisher | Network Engineer A : Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617 P : (02) 6162 0070 E : Jackson@forwardit.com.au<mailto:Jackson@forwardit.com.au> W : http://www.forwardit.com.au<http://www.forwardit.com.au/>
If you don't see anything in fscli then it is not reaching Freeswitch, make sure the profile is started and listening on 5080, if it is the issue is outside of Freeswitch either your PFsense or IPtables. Thanks, Moishe Grunstein Tornado Computer Systems, Inc. 212.400.7650 888.IPPBX.US Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com> [cid:image001.jpg@01C72F94.9EE45D60]<http://www.nysolutions.com/> Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Jackson Fisher - Forward.IT Sent: Monday, June 15, 2015 7:24 PM To: freeswitch-users@lists.freeswitch.org Subject: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI Hi All, I am having some issues with a Freeswitch install I am trying to stand up. Currently the Freeswitch server is sitting behind a PFsense firewall, I have 5060-5080 & 16384 - 32768 forwarded onto the box. Sip trunk is registering fine and outbound call work without issue, however when I call inbound I see the SIP invite cross the firewall destined for :5080 but in fs_cli with external siptrace on I do not see any calls connecting. Trunk is internode nodephone, and I have set it up following the freeswitch guide. My end goal is to set up a Multi-tennant system, if that makes a difference to any of the config. I am pretty new to freeswitch so if anybody could give me any pointers on where to start that would be fantastic. Thanks, Jackson Fisher [Email-signature.jpg] Jackson Fisher | Network Engineer A : Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617 P : (02) 6162 0070 E : Jackson@forwardit.com.au<mailto:Jackson@forwardit.com.au> W : http://www.forwardit.com.au<http://www.forwardit.com.au/>
Hi Moishe, Thank you for replying. I have issued the command "sofia profile external start" and the service starts successfully, there is no iptables installed on the box (debian 7) and I am confident that tcp/udp 5060-5080 are being forwarded correctly. I am tearing my hair out with this one any assistance is greatly appreciated. Thanks, Jackson Fisher [Email-signature.jpg] Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au<mailto:Jackson@forwardit.com.au> From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Moishe Grunstein Sent: Tuesday, 16 June 2015 9:35 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI If you don't see anything in fscli then it is not reaching Freeswitch, make sure the profile is started and listening on 5080, if it is the issue is outside of Freeswitch either your PFsense or IPtables. Thanks, Moishe Grunstein Tornado Computer Systems, Inc. 212.400.7650 888.IPPBX.US Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com> [cid:image001.jpg@01C72F94.9EE45D60]<http://www.nysolutions.com/> Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS From: freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org> [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Jackson Fisher - Forward.IT Sent: Monday, June 15, 2015 7:24 PM To: freeswitch-users@lists.freeswitch.org<mailto:freeswitch-users@lists.freeswitch.org> Subject: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI Hi All, I am having some issues with a Freeswitch install I am trying to stand up. Currently the Freeswitch server is sitting behind a PFsense firewall, I have 5060-5080 & 16384 - 32768 forwarded onto the box. Sip trunk is registering fine and outbound call work without issue, however when I call inbound I see the SIP invite cross the firewall destined for :5080 but in fs_cli with external siptrace on I do not see any calls connecting. Trunk is internode nodephone, and I have set it up following the freeswitch guide. My end goal is to set up a Multi-tennant system, if that makes a difference to any of the config. I am pretty new to freeswitch so if anybody could give me any pointers on where to start that would be fantastic. Thanks, Jackson Fisher [Email-signature.jpg] Jackson Fisher | Network Engineer A : Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617 P : (02) 6162 0070 E : Jackson@forwardit.com.au<mailto:Jackson@forwardit.com.au> W : http://www.forwardit.com.au<http://www.forwardit.com.au/> ________________________________ Spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=s> Phish/Fraud<https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=p> Not spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=n> Forget previous vote<https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=f>
Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:
Hi Moishe,
Thank you for replying. I have issued the command “sofia profile external start” and the service starts successfully, there is no iptables installed on the box (debian 7) and I am confident that tcp/udp 5060-5080 are being forwarded correctly.
I am tearing my hair out with this one any assistance is greatly appreciated.
Thanks, Jackson Fisher
Email-signature.jpg
* *
*Jackson Fisher* | Network Engineer | 02 6162 0070 | _Jackson@forwardit.com.au <mailto:Jackson@forwardit.com.au>_
*From:*freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Moishe Grunstein *Sent:* Tuesday, 16 June 2015 9:35 AM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI
If you don’t see anything in fscli then it is not reaching Freeswitch, make sure the profile is started and listening on 5080, if it is the issue is outside of Freeswitch either your PFsense or IPtables.
Thanks,
Moishe Grunstein
Tornado Computer Systems, Inc.
212.400.7650 888.IPPBX.US *Service Request Email: support@nysolutions.com <mailto:support@nysolutions.com> *
cid:image001.jpg@01C72F94.9EE45D60 <http://www.nysolutions.com/>
Computer Networking * Managed Services * IP Video Surveillance * Network Assessments * Web Solutions * Voice over IP * Disaster Recovery * Network Security * Site Surveys * CMS
*From:*freeswitch-users-bounces@lists.freeswitch.org <mailto:freeswitch-users-bounces@lists.freeswitch.org> [mailto:freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Jackson Fisher - Forward.IT *Sent:* Monday, June 15, 2015 7:24 PM *To:* freeswitch-users@lists.freeswitch.org <mailto:freeswitch-users@lists.freeswitch.org> *Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI
Hi All,
I am having some issues with a Freeswitch install I am trying to stand up. Currently the Freeswitch server is sitting behind a PFsense firewall, I have 5060-5080 & 16384 – 32768 forwarded onto the box.
Sip trunk is registering fine and outbound call work without issue, however when I call inbound I see the SIP invite cross the firewall destined for :5080 but in fs_cli with external siptrace on I do not see any calls connecting.
Trunk is internode nodephone, and I have set it up following the freeswitch guide.
My end goal is to set up a Multi-tennant system, if that makes a difference to any of the config.
I am pretty new to freeswitch so if anybody could give me any pointers on where to start that would be fantastic.
Thanks, Jackson Fisher
Email-signature.jpg
*Jackson Fisher** *|* *Network Engineer
A: Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617
P :(02) 6162 0070
E :*Jackson@forwardit.com.au <mailto:Jackson@forwardit.com.au>*
W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>
------------------------------------------------------------------------
Spam <https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=s> Phish/Fraud <https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=p> Not spam <https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=n> Forget previous vote <https://antispam.roaringpenguin.com/canit/b.php?i=02OELBapM&m=1abea13951af&t=20150615&c=f>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi All, Just to make sure I am correct, the profile that SIP trunks register is the external profile, and that profile is listening on :5080? When I try to call in, on the firewall I see the sip provider sourceip:5060-> destinationip:5080 being forwarded to the box. When I run a tcpdump port 5080 on the box I see nothing hitting it. [cid:image001.png@01D0A820.10C3ED80] root@PBX:/home/pbxadmin# tcpdump port 5080 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes any ideas? Thanks, Jackson Fisher Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of William King Sent: Tuesday, 16 June 2015 10:12 AM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com<mailto:william.king@quentustech.com> On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:
Hi Moishe,
Thank you for replying. I have issued the command "sofia profile
external start" and the service starts successfully, there is no
iptables installed on the box (debian 7) and I am confident that
tcp/udp
5060-5080 are being forwarded correctly.
I am tearing my hair out with this one any assistance is greatly
appreciated.
Thanks, Jackson Fisher
Email-signature.jpg
* *
*Jackson Fisher* | Network Engineer | 02 6162 0070 |
_Jackson@forwardit.com.au<mailto:_Jackson@forwardit.com.au> <mailto:Jackson@forwardit.com.au>_
*From:*freeswitch-users-bounces@lists.freeswitch.org
[mailto:freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of
*Moishe Grunstein
*Sent:* Tuesday, 16 June 2015 9:35 AM
*To:* FreeSWITCH Users Help
*Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no
inbound calls hitting FS_CLI
If you don't see anything in fscli then it is not reaching Freeswitch,
make sure the profile is started and listening on 5080, if it is the
issue is outside of Freeswitch either your PFsense or IPtables.
Thanks,
Moishe Grunstein
Tornado Computer Systems, Inc.
212.400.7650 888.IPPBX.US
*Service Request Email: support@nysolutions.com<mailto:support@nysolutions.com>
<mailto:support@nysolutions.com> *
cid:image001.jpg@01C72F94.9EE45D60 <http://www.nysolutions.com/>
Computer Networking * Managed Services * IP Video Surveillance *
Network Assessments * Web Solutions * Voice over IP * Disaster
Recovery * Network Security * Site Surveys * CMS
*From:*freeswitch-users-bounces@lists.freeswitch.org
<mailto:freeswitch-users-bounces@lists.freeswitch.org>
[mailto:freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of
*Jackson Fisher - Forward.IT
*Sent:* Monday, June 15, 2015 7:24 PM
*To:* freeswitch-users@lists.freeswitch.org<mailto:freeswitch-users@lists.freeswitch.org>
<mailto:freeswitch-users@lists.freeswitch.org>
*Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound
calls hitting FS_CLI
Hi All,
I am having some issues with a Freeswitch install I am trying to stand
up. Currently the Freeswitch server is sitting behind a PFsense
firewall, I have 5060-5080 & 16384 - 32768 forwarded onto the box.
Sip trunk is registering fine and outbound call work without issue,
however when I call inbound I see the SIP invite cross the firewall
destined for :5080 but in fs_cli with external siptrace on I do not
see any calls connecting.
Trunk is internode nodephone, and I have set it up following the
freeswitch guide.
My end goal is to set up a Multi-tennant system, if that makes a
difference to any of the config.
I am pretty new to freeswitch so if anybody could give me any pointers
on where to start that would be fantastic.
Thanks, Jackson Fisher
Email-signature.jpg
*Jackson Fisher** *|* *Network Engineer
A: Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617
P :(02) 6162 0070
E :*Jackson@forwardit.com.au <mailto:Jackson@forwardit.com.au>*
W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>
----------------------------------------------------------------------
--
Spam
Phish/Fraud
Not spam
Forget previous vote
______________________________________________________________________
___ Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org<mailto:consulting@freeswitch.org>
Official FreeSWITCH Sites
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
rs
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- BEGIN-ANTISPAM-VOTING-LINKS ------------------------------------------------------ Teach CanIt if this mail (ID 02OEMeiua) is spam: Spam: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t... Fraud/Phish: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t... Not spam: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t... Forget vote: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t... ------------------------------------------------------ END-ANTISPAM-VOTING-LINKS
Don't change the port like that on nat mapping. One to one nat mapping are key. Also is this you? https://www.reddit.com/r/VOIP/comments/39ynue/freeswitch_behind_nat_no_incom... On Monday, June 15, 2015, Jackson Fisher - Forward.IT < jackson@forwardit.com.au> wrote:
Hi All,
Just to make sure I am correct, the profile that SIP trunks register is the external profile, and that profile is listening on :5080?
When I try to call in, on the firewall I see the sip provider sourceip:5060-> destinationip:5080 being forwarded to the box. When I run a tcpdump port 5080 on the box I see nothing hitting it.
root@PBX:/home/pbxadmin# tcpdump port 5080
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
any ideas?
Thanks, Jackson Fisher
Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>
-----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');> [mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] On Behalf Of William King Sent: Tuesday, 16 June 2015 10:12 AM To: freeswitch-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');> Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI
Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump.
William King
Senior Engineer
Quentus Technologies, INC
1037 NE 65th St Suite 273
Seattle, WA 98115
Main: (877) 211-9337
Office: (206) 388-4772
Cell: (253) 686-5518
william.king@quentustech.com <javascript:_e(%7B%7D,'cvml','william.king@quentustech.com');>
On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:
Hi Moishe,
Thank you for replying. I have issued the command “sofia profile
external start” and the service starts successfully, there is no
iptables installed on the box (debian 7) and I am confident that
tcp/udp
5060-5080 are being forwarded correctly.
I am tearing my hair out with this one any assistance is greatly
appreciated.
Thanks, Jackson Fisher
Email-signature.jpg
* *
*Jackson Fisher* | Network Engineer | 02 6162 0070 |
_Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','_Jackson@forwardit.com.au');> < mailto:Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>_
*From:*freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
[mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Moishe Grunstein
*Sent:* Tuesday, 16 June 2015 9:35 AM
*To:* FreeSWITCH Users Help
*Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no
inbound calls hitting FS_CLI
If you don’t see anything in fscli then it is not reaching Freeswitch,
make sure the profile is started and listening on 5080, if it is the
issue is outside of Freeswitch either your PFsense or IPtables.
Thanks,
Moishe Grunstein
Tornado Computer Systems, Inc.
212.400.7650 888.IPPBX.US
*Service Request Email: support@nysolutions.com <javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>
<mailto:support@nysolutions.com <javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>> *
cid:image001.jpg@01C72F94.9EE45D60 <http://www.nysolutions.com/>
Computer Networking * Managed Services * IP Video Surveillance *
Network Assessments * Web Solutions * Voice over IP * Disaster
Recovery * Network Security * Site Surveys * CMS
*From:*freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
<mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
[mailto:freeswitch-users-bounces@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Jackson Fisher - Forward.IT
*Sent:* Monday, June 15, 2015 7:24 PM
*To:* freeswitch-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>
<mailto:freeswitch-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>>
*Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound
calls hitting FS_CLI
Hi All,
I am having some issues with a Freeswitch install I am trying to stand
up. Currently the Freeswitch server is sitting behind a PFsense
firewall, I have 5060-5080 & 16384 – 32768 forwarded onto the box.
Sip trunk is registering fine and outbound call work without issue,
however when I call inbound I see the SIP invite cross the firewall
destined for :5080 but in fs_cli with external siptrace on I do not
see any calls connecting.
Trunk is internode nodephone, and I have set it up following the
freeswitch guide.
My end goal is to set up a Multi-tennant system, if that makes a
difference to any of the config.
I am pretty new to freeswitch so if anybody could give me any pointers
on where to start that would be fantastic.
Thanks, Jackson Fisher
Email-signature.jpg
*Jackson Fisher** *|* *Network Engineer
A: Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617
P :(02) 6162 0070
E :*Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');> < mailto:Jackson@forwardit.com.au <javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>*
W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>
----------------------------------------------------------------------
--
Spam
Phish/Fraud
Not spam
Forget previous vote
______________________________________________________________________
___ Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');>
Official FreeSWITCH Sites
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
rs
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');>
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://confluence.freeswitch.org
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
--
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------
Teach CanIt if this mail (ID 02OEMeiua) is spam:
Spam: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
Fraud/Phish: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
Not spam: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
Forget vote: https://antispam.roaringpenguin.com/canit/b.php?i=02OEMeiua&m=edab584281f2&t...
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
So this is my rule in the firewall: [cid:image002.png@01D0A822.01317FC0] I do not believe that any port address translation is happening with that rule And yes, that is my POST ☺ Thanks, Jackson Fisher [Email-signature.jpg] Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au<mailto:Jackson@forwardit.com.au> From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Tuesday, 16 June 2015 10:43 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI Don't change the port like that on nat mapping. One to one nat mapping are key. Also is this you? https://www.reddit.com/r/VOIP/comments/39ynue/freeswitch_behind_nat_no_incom... On Monday, June 15, 2015, Jackson Fisher - Forward.IT <jackson@forwardit.com.au<mailto:jackson@forwardit.com.au>> wrote: Hi All, Just to make sure I am correct, the profile that SIP trunks register is the external profile, and that profile is listening on :5080? When I try to call in, on the firewall I see the sip provider sourceip:5060-> destinationip:5080 being forwarded to the box. When I run a tcpdump port 5080 on the box I see nothing hitting it. [cid:image004.png@01D0A822.01317FC0] root@PBX:/home/pbxadmin# tcpdump port 5080 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes any ideas? Thanks, Jackson Fisher Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');> -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');> [mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] On Behalf Of William King Sent: Tuesday, 16 June 2015 10:12 AM To: freeswitch-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');> Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com<javascript:_e(%7B%7D,'cvml','william.king@quentustech.com');> On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:
Hi Moishe,
Thank you for replying. I have issued the command “sofia profile
external start” and the service starts successfully, there is no
iptables installed on the box (debian 7) and I am confident that
tcp/udp
5060-5080 are being forwarded correctly.
I am tearing my hair out with this one any assistance is greatly
appreciated.
Thanks, Jackson Fisher
Email-signature.jpg
* *
*Jackson Fisher* | Network Engineer | 02 6162 0070 |
_Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','_Jackson@forwardit.com.au');> <mailto:Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>_
*From:*freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
[mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Moishe Grunstein
*Sent:* Tuesday, 16 June 2015 9:35 AM
*To:* FreeSWITCH Users Help
*Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no
inbound calls hitting FS_CLI
If you don’t see anything in fscli then it is not reaching Freeswitch,
make sure the profile is started and listening on 5080, if it is the
issue is outside of Freeswitch either your PFsense or IPtables.
Thanks,
Moishe Grunstein
Tornado Computer Systems, Inc.
212.400.7650 888.IPPBX.US<http://888.IPPBX.US>
*Service Request Email: support@nysolutions.com<javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>
<mailto:support@nysolutions.com<javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>> *
cid:image001.jpg@01C72F94.9EE45D60 <http://www.nysolutions.com/>
Computer Networking * Managed Services * IP Video Surveillance *
Network Assessments * Web Solutions * Voice over IP * Disaster
Recovery * Network Security * Site Surveys * CMS
*From:*freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
<mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>>
[mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Jackson Fisher - Forward.IT
*Sent:* Monday, June 15, 2015 7:24 PM
*To:* freeswitch-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>
<mailto:freeswitch-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>>
*Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound
calls hitting FS_CLI
Hi All,
I am having some issues with a Freeswitch install I am trying to stand
up. Currently the Freeswitch server is sitting behind a PFsense
firewall, I have 5060-5080 & 16384 – 32768 forwarded onto the box.
Sip trunk is registering fine and outbound call work without issue,
however when I call inbound I see the SIP invite cross the firewall
destined for :5080 but in fs_cli with external siptrace on I do not
see any calls connecting.
Trunk is internode nodephone, and I have set it up following the
freeswitch guide.
My end goal is to set up a Multi-tennant system, if that makes a
difference to any of the config.
I am pretty new to freeswitch so if anybody could give me any pointers
on where to start that would be fantastic.
Thanks, Jackson Fisher
Email-signature.jpg
*Jackson Fisher** *|* *Network Engineer
A: Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617
P :(02) 6162 0070
E :*Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');> <mailto:Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>*
W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>
----------------------------------------------------------------------
--
Spam
Phish/Fraud
Not spam
Forget previous vote
______________________________________________________________________
___ Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org<javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');>
Official FreeSWITCH Sites
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
rs
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- BEGIN-ANTISPAM-VOTING-LINKS ------------------------------------------------------ Teach CanIt if this mail (ID 02OEMeiua) is spam: Spam: about:blank Fraud/Phish: about:blank Not spam: about:blank Forget vote: about:blank ------------------------------------------------------ END-ANTISPAM-VOTING-LINKS -- Brian West brian@freeswitch.org<mailto:brian@freeswitch.org> [http://billing.freeswitch.org/templates/default/img/whmcslogo.png] Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers<https://www.cluecon.com/call-for-speakers/> | Register<https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch<https://www.reddit.com/r/freeswitch> T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378) iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest ________________________________ Spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=s> Phish/Fraud<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=p> Not spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=n> Forget previous vote<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=f>
Hi All, After resetting the state table on the edge, it all came together. Inbound/outbound with audio. Thankyou to all who helped. Once again madd Wireshark skills uncovered the real problem. Thanks, Jackson Fisher [Email-signature.jpg] Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au<mailto:Jackson@forwardit.com.au> From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Jackson Fisher - Forward.IT Sent: Tuesday, 16 June 2015 10:49 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI So this is my rule in the firewall: [cid:image002.png@01D0A828.48181380] I do not believe that any port address translation is happening with that rule And yes, that is my POST ☺ Thanks, Jackson Fisher [Email-signature.jpg] Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au<mailto:Jackson@forwardit.com.au> From: freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org> [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Brian West Sent: Tuesday, 16 June 2015 10:43 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI Don't change the port like that on nat mapping. One to one nat mapping are key. Also is this you? https://www.reddit.com/r/VOIP/comments/39ynue/freeswitch_behind_nat_no_incom... On Monday, June 15, 2015, Jackson Fisher - Forward.IT <jackson@forwardit.com.au<mailto:jackson@forwardit.com.au>> wrote: Hi All, Just to make sure I am correct, the profile that SIP trunks register is the external profile, and that profile is listening on :5080? When I try to call in, on the firewall I see the sip provider sourceip:5060-> destinationip:5080 being forwarded to the box. When I run a tcpdump port 5080 on the box I see nothing hitting it. [cid:image004.png@01D0A828.48181380] root@PBX:/home/pbxadmin# tcpdump port 5080 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes any ideas? Thanks, Jackson Fisher Jackson Fisher | Network Engineer | 02 6162 0070 | Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');> -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');> [mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] On Behalf Of William King Sent: Tuesday, 16 June 2015 10:12 AM To: freeswitch-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');> Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com<javascript:_e(%7B%7D,'cvml','william.king@quentustech.com');> On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:
Hi Moishe,
Thank you for replying. I have issued the command “sofia profile
external start” and the service starts successfully, there is no
iptables installed on the box (debian 7) and I am confident that
tcp/udp
5060-5080 are being forwarded correctly.
I am tearing my hair out with this one any assistance is greatly
appreciated.
Thanks, Jackson Fisher
Email-signature.jpg
* *
*Jackson Fisher* | Network Engineer | 02 6162 0070 |
_Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','_Jackson@forwardit.com.au');> <mailto:Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>_
*From:*freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
[mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Moishe Grunstein
*Sent:* Tuesday, 16 June 2015 9:35 AM
*To:* FreeSWITCH Users Help
*Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no
inbound calls hitting FS_CLI
If you don’t see anything in fscli then it is not reaching Freeswitch,
make sure the profile is started and listening on 5080, if it is the
issue is outside of Freeswitch either your PFsense or IPtables.
Thanks,
Moishe Grunstein
Tornado Computer Systems, Inc.
212.400.7650 888.IPPBX.US<http://888.IPPBX.US>
*Service Request Email: support@nysolutions.com<javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>
<mailto:support@nysolutions.com<javascript:_e(%7B%7D,'cvml','support@nysolutions.com');>> *
cid:image001.jpg@01C72F94.9EE45D60 <http://www.nysolutions.com/>
Computer Networking * Managed Services * IP Video Surveillance *
Network Assessments * Web Solutions * Voice over IP * Disaster
Recovery * Network Security * Site Surveys * CMS
*From:*freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>
<mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>>
[mailto:freeswitch-users-bounces@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces@lists.freeswitch.org');>] *On Behalf Of
*Jackson Fisher - Forward.IT
*Sent:* Monday, June 15, 2015 7:24 PM
*To:* freeswitch-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>
<mailto:freeswitch-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users@lists.freeswitch.org');>>
*Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound
calls hitting FS_CLI
Hi All,
I am having some issues with a Freeswitch install I am trying to stand
up. Currently the Freeswitch server is sitting behind a PFsense
firewall, I have 5060-5080 & 16384 – 32768 forwarded onto the box.
Sip trunk is registering fine and outbound call work without issue,
however when I call inbound I see the SIP invite cross the firewall
destined for :5080 but in fs_cli with external siptrace on I do not
see any calls connecting.
Trunk is internode nodephone, and I have set it up following the
freeswitch guide.
My end goal is to set up a Multi-tennant system, if that makes a
difference to any of the config.
I am pretty new to freeswitch so if anybody could give me any pointers
on where to start that would be fantastic.
Thanks, Jackson Fisher
Email-signature.jpg
*Jackson Fisher** *|* *Network Engineer
A: Level 1 - Unit 8, 55-57 Lathlain Street, Belconnen ACT 2617
P :(02) 6162 0070
E :*Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');> <mailto:Jackson@forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson@forwardit.com.au');>>*
W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>
----------------------------------------------------------------------
--
Spam
Phish/Fraud
Not spam
Forget previous vote
______________________________________________________________________
___ Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org<javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');>
Official FreeSWITCH Sites
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');>
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
rs
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- BEGIN-ANTISPAM-VOTING-LINKS ------------------------------------------------------ Teach CanIt if this mail (ID 02OEMeiua) is spam: Spam: about:blank Fraud/Phish: about:blank Not spam: about:blank Forget vote: about:blank ------------------------------------------------------ END-ANTISPAM-VOTING-LINKS -- Brian West brian@freeswitch.org<mailto:brian@freeswitch.org> [http://billing.freeswitch.org/templates/default/img/whmcslogo.png] Twitter: @FreeSWITCH , @briankwest http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers<https://www.cluecon.com/call-for-speakers/> | Register<https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch<https://www.reddit.com/r/freeswitch> T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378) iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest ________________________________ Spam<about:blank> Phish/Fraud<about:blank> Not spam<about:blank> Forget previous vote<about:blank> ________________________________ Spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMON2v&m=7d500e40296c&t=20150615&c=s> Phish/Fraud<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMON2v&m=7d500e40296c&t=20150615&c=p> Not spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMON2v&m=7d500e40296c&t=20150615&c=n> Forget previous vote<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMON2v&m=7d500e40296c&t=20150615&c=f>
participants (4)
-
Brian West
-
Jackson Fisher - Forward.IT
-
Moishe Grunstein
-
William King