Thanks Lonnie. Great info to know.
Its still a bit of a mystery though as I was seeing the outbound packet with 
tcpdump so it had passed the firewall, but did not see the return packet!

Regards
Michael Knill

On 4/7/18, 10:41 pm, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:

    > So my questions are:
    > • Is tcpdump BEFORE the firewall?
    
    For incoming packets tcpdump is before the firewall, for outgoing packets 
tcpdump is after the firewall, ie.
    --
    wire -> NIC -> tcpdump -> netfilter/firewall
    
    netfilter/firewall -> tcpdump -> NIC -> wire
    --
    so tcpdump does not see outbound packets blocked by the firewall.
    
    
    > • What tests should I do next?
    
    Have you ever tried ...
    --
    service asterisk stop
    sleep 90
    service asterisk init
    --
    
    
    Lonnie
    
    
    
    
    
    > On Jul 3, 2018, at 10:19 PM, Michael Knill 
<michael.kn...@ipcsolutions.com.au> wrote:
    > 
    > Back to the ongoing saga of SIP Options ping not working. This one is a 
bit different though. Here is the scenario:
    >  
    >   • Can SSH into box fine and network connectivity is fine
    >   • Find IP Address based SIP Trunk is UNREACHABLE. Can ping provider 
from the box
    >   • Asterisk SIP Debug shows SIP Options sent but none received. This is 
also the case using tcpdump on the ppp0 interface
    >   • Asterisk reload and Firewall restart did not fix the problem. The 
system needed a full reboot for the trunk to be REACHABLE
    >  
    > So my questions are:
    >   • Is tcpdump BEFORE the firewall?
    >   • Can you think of what the issue could be?
    >   • What tests should I do next?
    >  
    > Unfortunately (or fortunately) this happens very infrequently so the fix 
will be a long confirmation period.
    >  
    > Thanks all!
    >  
    > Regards
    > Michael Knill
    > 
------------------------------------------------------------------------------
    > Check out the vibrant tech community on one of the world's most
    > engaging tech sites, Slashdot.org! 
http://sdm.link/slashdot_______________________________________________
    > Astlinux-users mailing list
    > Astlinux-users@lists.sourceforge.net
    > https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    > Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.
    
    
    
------------------------------------------------------------------------------
    Check out the vibrant tech community on one of the world's most
    engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    _______________________________________________
    Astlinux-users mailing list
    Astlinux-users@lists.sourceforge.net
    https://lists.sourceforge.net/lists/listinfo/astlinux-users
    
    Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to