[Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI

Jackson Fisher - Forward.IT jackson at forwardit.com.au
Tue Jun 16 04:48:41 MSD 2015


So this is my rule in the firewall:
[cid:image002.png at 01D0A822.01317FC0]

I do not believe that any port address translation is happening with that rule


And yes, that is my POST ☺


Thanks, Jackson Fisher

[Email-signature.jpg]


Jackson Fisher   |   Network Engineer  |   02 6162 0070   |   Jackson at forwardit.com.au<mailto:Jackson at forwardit.com.au>



From: freeswitch-users-bounces at lists.freeswitch.org [mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Brian West
Sent: Tuesday, 16 June 2015 10:43 AM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI

Don't change the port like that on nat mapping.  One to one nat mapping are key.

Also is this you?

https://www.reddit.com/r/VOIP/comments/39ynue/freeswitch_behind_nat_no_incoming_calls

On Monday, June 15, 2015, Jackson Fisher - Forward.IT <jackson at forwardit.com.au<mailto:jackson at forwardit.com.au>> wrote:

Hi All,



Just to make sure I am correct, the profile that SIP trunks register is the external profile, and that profile is listening on :5080?



When I try to call in, on the firewall I see the sip provider sourceip:5060-> destinationip:5080 being forwarded to the box. When I run a tcpdump port 5080 on the box I see nothing hitting it.



[cid:image004.png at 01D0A822.01317FC0]



root at PBX:/home/pbxadmin# tcpdump port 5080

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes





any ideas?













Thanks, Jackson Fisher







Jackson Fisher   |   Network Engineer  |   02 6162 0070   |   Jackson at forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson at forwardit.com.au');>



-----Original Message-----
From: freeswitch-users-bounces at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');> [mailto:freeswitch-users-bounces at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>] On Behalf Of William King
Sent: Tuesday, 16 June 2015 10:12 AM
To: freeswitch-users at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users at lists.freeswitch.org');>
Subject: Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound calls hitting FS_CLI



Siptrace on the FS box would be the next step. Check confluence for the command line syntax for tcpdump.



William King

Senior Engineer

Quentus Technologies, INC

1037 NE 65th St Suite 273

Seattle, WA 98115

Main:   (877) 211-9337

Office: (206) 388-4772

Cell:   (253) 686-5518

william.king at quentustech.com<javascript:_e(%7B%7D,'cvml','william.king at quentustech.com');>



On 6/15/15 4:51 PM, Jackson Fisher - Forward.IT wrote:

> Hi Moishe,

>

>

>

> Thank you for replying. I have issued the command “sofia profile

> external start” and the service starts successfully, there is no

> iptables installed on the box (debian 7) and I am confident that

> tcp/udp

> 5060-5080 are being forwarded correctly.

>

>

>

> I am tearing my hair out with this one any assistance is greatly

> appreciated.

>

>

>

>

>

> Thanks, Jackson Fisher

>

>

>

> Email-signature.jpg

>

>

>

> * *

>

> *Jackson Fisher*   |   Network Engineer  |   02 6162 0070   |

> _Jackson at forwardit.com.au<javascript:_e(%7B%7D,'cvml','_Jackson at forwardit.com.au');> <mailto:Jackson at forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson at forwardit.com.au');>>_

>

>

>

>

>

> *From:*freeswitch-users-bounces at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>

> [mailto:freeswitch-users-bounces at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>] *On Behalf Of

> *Moishe Grunstein

> *Sent:* Tuesday, 16 June 2015 9:35 AM

> *To:* FreeSWITCH Users Help

> *Subject:* Re: [Freeswitch-users] Freeswitch NAT bahind PFSENSE no

> inbound calls hitting FS_CLI

>

>

>

> If you don’t see anything in fscli then it is not reaching Freeswitch,

> make sure the profile is started and listening on 5080, if it is the

> issue is outside of Freeswitch either your PFsense or IPtables.

>

>

>

> Thanks,

>

>

>

> Moishe Grunstein

>

> Tornado Computer Systems, Inc.

>

> 212.400.7650 888.IPPBX.US<http://888.IPPBX.US>

> *Service Request Email: support at nysolutions.com<javascript:_e(%7B%7D,'cvml','support at nysolutions.com');>

> <mailto:support at nysolutions.com<javascript:_e(%7B%7D,'cvml','support at nysolutions.com');>> *

>

> cid:image001.jpg at 01C72F94.9EE45D60 <http://www.nysolutions.com/>

>

> Computer Networking * Managed Services * IP Video Surveillance *

> Network Assessments * Web Solutions * Voice over IP * Disaster

> Recovery * Network Security * Site Surveys * CMS

>

>

>

> *From:*freeswitch-users-bounces at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>

> <mailto:freeswitch-users-bounces at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>>

> [mailto:freeswitch-users-bounces at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users-bounces at lists.freeswitch.org');>] *On Behalf Of

> *Jackson Fisher - Forward.IT

> *Sent:* Monday, June 15, 2015 7:24 PM

> *To:* freeswitch-users at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users at lists.freeswitch.org');>

> <mailto:freeswitch-users at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','freeswitch-users at lists.freeswitch.org');>>

> *Subject:* [Freeswitch-users] Freeswitch NAT bahind PFSENSE no inbound

> calls hitting FS_CLI

>

>

>

> Hi All,

>

>

>

> I am having some issues with a Freeswitch install I am trying to stand

> up. Currently the Freeswitch server is sitting behind a PFsense

> firewall, I have 5060-5080 & 16384 – 32768 forwarded onto the box.

>

>

>

> Sip trunk is registering fine and outbound call work without issue,

> however when I call inbound I see the SIP invite cross the firewall

> destined for :5080 but in fs_cli with external siptrace on I do not

> see any calls connecting.

>

>

>

> Trunk is internode nodephone, and I have set it up following the

> freeswitch guide.

>

>

>

> My end goal is to set up a Multi-tennant system, if that makes a

> difference to any of the config.

>

>

>

> I am pretty new to freeswitch so if anybody could give me any pointers

> on where to start that would be fantastic.

>

>

>

>

>

>

>

>

>

> Thanks, Jackson Fisher

>

>

>

>

>

>

>

> Email-signature.jpg

>

>

>

> *Jackson Fisher**   *|*  *Network Engineer

>

>

>

> A: Level 1 - Unit 8,  55-57 Lathlain Street,  Belconnen ACT 2617

>

> P :(02) 6162 0070

>

> E :*Jackson at forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson at forwardit.com.au');> <mailto:Jackson at forwardit.com.au<javascript:_e(%7B%7D,'cvml','Jackson at forwardit.com.au');>>*

>

> W :*http://www.forwardit.com.au* <http://www.forwardit.com.au/>

>

>

>

>

>

>

>

> ----------------------------------------------------------------------

> --

>

>

> Spam

> Phish/Fraud

> Not spam

> Forget previous vote

>

>

>

> ______________________________________________________________________

> ___ Professional FreeSWITCH Consulting Services:

> consulting at freeswitch.org<javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>

> http://www.freeswitchsolutions.com

>

> Official FreeSWITCH Sites

> http://www.freeswitch.org

> http://confluence.freeswitch.org

> http://www.cluecon.com

>

> FreeSWITCH-users mailing list

> FreeSWITCH-users at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>

> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users

> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use

> rs

> http://www.freeswitch.org

>



_________________________________________________________________________

Professional FreeSWITCH Consulting Services:

consulting at freeswitch.org<javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>

http://www.freeswitchsolutions.com



Official FreeSWITCH Sites

http://www.freeswitch.org

http://confluence.freeswitch.org

http://www.cluecon.com



FreeSWITCH-users mailing list

FreeSWITCH-users at lists.freeswitch.org<javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>

http://lists.freeswitch.org/mailman/listinfo/freeswitch-users

UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users

http://www.freeswitch.org





--

BEGIN-ANTISPAM-VOTING-LINKS

------------------------------------------------------



Teach CanIt if this mail (ID 02OEMeiua) is spam:

Spam:        about:blank

Fraud/Phish: about:blank

Not spam:    about:blank

Forget vote: about:blank

------------------------------------------------------

END-ANTISPAM-VOTING-LINKS




--

Brian West
brian at freeswitch.org<mailto:brian at freeswitch.org>

[http://billing.freeswitch.org/templates/default/img/whmcslogo.png]

Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

ClueCon 2015 Call for Speakers<https://www.cluecon.com/call-for-speakers/> | Register<https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch<https://www.reddit.com/r/freeswitch>

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest

________________________________

Spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=s>
Phish/Fraud<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=p>
Not spam<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=n>
Forget previous vote<https://antispam.roaringpenguin.com/canit/b.php?i=02OEMJ6lb&m=24a62e90bff1&t=20150615&c=f>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150616/2d257634/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 2717 bytes
Desc: image002.png
Url : http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150616/2d257634/attachment-0002.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 1927 bytes
Desc: image003.jpg
Url : http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150616/2d257634/attachment-0001.jpg 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 6722 bytes
Desc: image004.png
Url : http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150616/2d257634/attachment-0003.png 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list