Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 2403 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SIP on V7

mdallagi
Hi

I hope this is the right place to explain my problem (SIP is no longer a proxy service on asl7)...

Please refer to: 
https://community.sophos.com/products/unified-threat-management/astaroorg/f/114/t/72942

and to:

https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32029

Now I'm using v. 7.001 and I still have the problem with RTP traffic.

Thanks


This thread was automatically locked due to age.
  • 0
    me too neither one of those seem to have found a fix... ASTARO HELP!!!
  • 0 in reply to jonesboy
    Hi guys, 

    we have tested the SIP connection tracking helper inhouse and it worked.

    Can you please descripbe what your setup is, which provider and which phone you are using.

    Can you check your packetfilter log if something gets blocked?

    Can you use tcpdump to log the SIP traffic in order to check there the issue is.

    tcpdump -i eth1 -s 0 -w /tmp/sip_call.dump port 5060


    Thanks for your support
    Gert
  • 0 in reply to Gert Hansen
    Gert,
    I don't think either of them are using 5060 for their SIP traffic.

    Ian M[[[:)]]][[[:)]]][[[:)]]]
  • 0 in reply to RFCat_vk_01
    i am on subnet 192.168.1.0 i connect to my asterisk box on subnet 192.168.2.0
    all my phones are cisco 7940g phones. I would post my logs but i just messed up my box with a bad route and i can't get in ...I am currently just using astaro as a proxy it is not setup as a gate.

    Default DROP  UDP 
    192.168.1.11  :  38411
    → 
    192.168.2.18  :  33438

    len=40  ttl=1  tos=0x00  srcmac=00:0a:95:c8:55:34  dstmac=00[:D]0:b7:2c:25:8f
    09:10:49  Default DROP  UDP 
    192.168.1.11  :  38411
    → 
    192.168.2.18  :  33439

    len=40  ttl=1  tos=0x00  srcmac=00:0a:95:c8:55:34  dstmac=00[:D]0:b7:2c:25:8f
    09:10:54  Default DROP  UDP 
    192.168.1.11  :  38411
    → 
    192.168.2.18  :  33440

    len=40  ttl=1  tos=0x00  srcmac=00:0a:95:c8:55:34  dstmac=00[:D]0:b7:2c:25:8f
    09:10:59  Default DROP  UDP 
    192.168.1.11  :  38411
    → 
    192.168.2.18  :  33441

    len=40  ttl=2  tos=0x00  srcmac=00:0a:95:c8:55:34  dstmac=00[:D]0:b7:2c:25:8f
    09:11:04  Default DROP  UDP 
    192.168.1.11  :  38411
    → 
    192.168.2.18  :  33442

    len=40  ttl=2  tos=0x00  srcmac=00:0a:95:c8:55:34  dstmac=00[:D]0:b7:2c:25:8f
  • 0 in reply to jonesboy
    9:02:12  Default DROP  UDP 
    192.168.1.100  :  50553
    → 
    192.168.2.18  :  69

    len=48  ttl=63  tos=0x10  srcmac=00:19:e8:f4:be:6c  dstmac=00:40:f4:14:32:bf
    09:02:16  Default DROP  UDP 
    192.168.1.100  :  50553
    → 
    192.168.2.18  :  69

    len=48  ttl=63  tos=0x10  srcmac=00:19:e8:f4:be:6c  dstmac=00:40:f4:14:32:bf
    09:02:20  Default DROP  UDP 
    192.168.1.100  :  50554
    → 
    192.168.2.18  :  69

    len=52  ttl=63  tos=0x10  srcmac=00:19:e8:f4:be:6c  dstmac=00:40:f4:14:32:bf
    09:02:21  Default DROP  UDP 
    192.168.1.100  :  50554
    → 
    192.168.2.18  :  69

    len=52  ttl=63  tos=0x10  srcmac=00:19:e8:f4:be:6c  dstmac=00:40:f4:14:32:bf
    09:02:25  Default DROP  UDP 
    192.168.1.100  :  50554
    → 
    192.168.2.18  :  69

    len=52  ttl=63  tos=0x10  srcmac=00:19:e8:f4:be:6c  dstmac=00:40:f4:14:32:bf
    09:02:29
  • 0 in reply to jonesboy
    Hi,

    can you please post which devices have the ips
    192.168.1.11
    192.168.1.100
    192.168.2.18

    thx Gert
  • 0 in reply to Gert Hansen
    Hi Gert,

    I try to be more specific, here my configuration:
    I'm doing my SIP test with a v7.001 on a ADM 1GHz, 256MB RAM, 40GB HD and 2 Intel PRO100 Nics.
    I started from a fresh installation and than I configured:

    - IP on external nic: a.b.c.d
    - IP on internal nic: default (192.168.2.100)
    - Nat masquerading
    - Enabled "VoIP Security" -> "SIP" with SIP client IP (192.168.2.5) and SIPs proxy server IP (1.2.3.4 and 1.2.3.5).

    The SIP client is a "Pirelli Discus DP-L10" wireless phone with this configuration:

    - IP: 192.168.2.5 
    - GW: 192.168.2.100
    - Proxy server 1.2.3.4 
    - Proxy port: 5060
    - Registrar server: 1.2.3.4
    - Registrar port: 5060
    - Registration time: 3600
    - Outbound server: 1.2.3.4
    - Outbound port: 5060
    - RTP audio port: 20000
    - RTP packet period: 20

    When I try to call someone and the remote phone asnwer I got these packet filter logs:
    ...
    2007:02:08-15:38:49 (none) ulogd[2668]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" dstmac="00:90:27:2f:5a:48" srcmac="00:0a:41:14:4f:00" srcip="1.2.3.5" dstip="a.b.c.d" proto="17" length="60" tos="0x00" prec="0x40" ttl="52" srcport="59882" dstport="20000"
    2007:02:08-15:38:49 (none) ulogd[2668]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" dstmac="00:90:27:2f:5a:48" srcmac="00:0a:41:14:4f:00" srcip="1.2.3.5" dstip="a.b.c.d" proto="17" length="60" tos="0x00" prec="0x40" ttl="52" srcport="59882" dstport="20000"
    2007:02:08-15:38:49 (none) ulogd[2668]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth1" outitf="eth0" dstmac="00:02:b3:3a:5c:08" srcmac="00:17:c2:ef:c4:2d" srcip="192.168.2.5" dstip="1.2.3.4" proto="17" length="60" tos="0x00" prec="0xe0" ttl="126" srcport="20000" dstport="59882"
    2007:02:08-15:38:49 (none) ulogd[2668]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" dstmac="00:90:27:2f:5a:48" srcmac="00:0a:41:14:4f:00" srcip="1.2.3.5" dstip="a.b.c.d" proto="17" length="60" tos="0x00" prec="0x40" ttl="52" srcport="59882" dstport="20000"
    ...
    As you can see, the RTP packets don't arrive from 1.2.3.4 but from 1.2.3.5 so the firewall doesn't understand the RTP traffic because it is waiting for it from 1.2.3.4 instead of 1.2.3.5
    Unfortunately I can't manage the SIP proxy behavior/configuration.

    Any idea to solve my problem?
  • 0 in reply to mdallagi
    just an idea:

    Astaro predifined SIP aus TCP/5060, but SIP is also using UDP/5060. 

    I don't know if the predefined settings affect the connection tracker helper module ?!

    Regards KoC