And yes good test. Of course a firewall restart does not clear translations.
Am I able to clear firewall translations without waiting for them to time out
which is what I assume you are doing here?
It would have to be dome from a remote session as well e.g. through the
firewall.
Regards
Michael Knill
On 4/7/18, 10:41 pm, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:
> So my questions are:
> • Is tcpdump BEFORE the firewall?
For incoming packets tcpdump is before the firewall, for outgoing packets
tcpdump is after the firewall, ie.
--
wire -> NIC -> tcpdump -> netfilter/firewall
netfilter/firewall -> tcpdump -> NIC -> wire
--
so tcpdump does not see outbound packets blocked by the firewall.
> • What tests should I do next?
Have you ever tried ...
--
service asterisk stop
sleep 90
service asterisk init
--
Lonnie
> On Jul 3, 2018, at 10:19 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>
> Back to the ongoing saga of SIP Options ping not working. This one is a
bit different though. Here is the scenario:
>
> • Can SSH into box fine and network connectivity is fine
> • Find IP Address based SIP Trunk is UNREACHABLE. Can ping provider
from the box
> • Asterisk SIP Debug shows SIP Options sent but none received. This is
also the case using tcpdump on the ppp0 interface
> • Asterisk reload and Firewall restart did not fix the problem. The
system needed a full reboot for the trunk to be REACHABLE
>
> So my questions are:
> • Is tcpdump BEFORE the firewall?
> • Can you think of what the issue could be?
> • What tests should I do next?
>
> Unfortunately (or fortunately) this happens very infrequently so the fix
will be a long confirmation period.
>
> Thanks all!
>
> Regards
> Michael Knill
>
------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org!
http://sdm.link/slashdot_______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
