2020-06-23 15:02 GMT+02:00, Luca Bertoncello <lucab...@lucabert.de>: > Am 23.06.2020 14:49, schrieb Marek Greško: > > Hi Marek, > >> this could be ip address of the different interface on the same box. I >> think it works like expected. The only exception would be if the sip >> peer ignores the icmp packet unreachable. But I doubt this is the > > Do you mean "my Linux-Box ignores ICMP packet unreachable" or "Deutsche > Telekom ignores them"?
I meant DT, but this was a speculation. I did not say they do. I consider it highly improbable. Then I was asking whether you do. As per configuration you sent you are not blocking icmp type 3 so this should not be an issue. > >> case. Anyway you get problems also when calling to LTE phone without >> using sip provider. > > I have problem calling someone outside my networks and I have problem if > the peers are in different networks... > >> Let first concentrate on these calls LTE to LAN. Are you sure you do >> not block incoming icmp unreachables? At least verify type 3 subtype 4 >> is enabled. If it is, I have no clue what is going on. > > Well, I limit incoming ICMP packets and I block some hosts (known > crackers)... > If you think, I can send you the script I use (with iptables) to manage > my firewall, so you can check it... > The only entries I have, having something to do with ICMP, are: > > ---------------------------------- > /bin/echo -n "Disable ICMP Redirect acceptance..." > for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do > /bin/echo 0 > $f > done > /bin/echo "done." > /sbin/iptables -A INPUT -i dsl0 -p icmp --icmp-type echo-request -m > limit --limit 6/m --limit-burst 5 -j ACCEPT > /sbin/iptables -A FORWARD -o dsl0 -p icmp -j ACCEPT > ---------------------------------- > > and of course other rules to allow ICMP pakets in the internal > networks... > > Thanks a lot > Luca Bertoncello > (lucab...@lucabert.de) > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > Check out the new Asterisk community forum at: > https://community.asterisk.org/ > > New to Asterisk? Start here: > https://wiki.asterisk.org/wiki/display/AST/Getting+Started > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users