Thanks Lonnie. Good call. That will be my next test.
PS IP Address stays the same.

Regards
Michael Knill

On 5/7/18, 9:14 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:

    Michael,
    
    My theory has always been your problem is with an upstream firewall.
    
    Stopping asterisk for a period of time may allow upstream firewall states 
to expire.
    
    By rebooting AstLinux you will do the same (stop/start Asterisk) and if you 
have PPPoE you may pull a different IP address which will bypass any upstream 
states.
    
    From all you have described, this looks to me to be an upstream issue 
relative to AstLinux.
    
    Lonnie
    
    
    
    > On Jul 4, 2018, at 4:56 PM, Michael Knill 
<michael.kn...@ipcsolutions.com.au> wrote:
    > 
    > And yes good test. Of course a firewall restart does not clear 
translations.
    > Am I able to clear firewall translations without waiting for them to time 
out which is what I assume you are doing here?
    > It would have to be dome from a remote session as well e.g. through the 
firewall.
    > 
    > Regards
    > Michael Knill
    > 
    > On 4/7/18, 10:41 pm, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:
    > 
    >> So my questions are:
    >> • Is tcpdump BEFORE the firewall?
    > 
    >    For incoming packets tcpdump is before the firewall, for outgoing 
packets tcpdump is after the firewall, ie.
    >    --
    >    wire -> NIC -> tcpdump -> netfilter/firewall
    > 
    >    netfilter/firewall -> tcpdump -> NIC -> wire
    >    --
    >    so tcpdump does not see outbound packets blocked by the firewall.
    > 
    > 
    >> • What tests should I do next?
    > 
    >    Have you ever tried ...
    >    --
    >    service asterisk stop
    >    sleep 90
    >    service asterisk init
    >    --
    > 
    > 
    >    Lonnie
    > 
    > 
    > 
    > 
    > 
    >> On Jul 3, 2018, at 10:19 PM, Michael Knill 
<michael.kn...@ipcsolutions.com.au> wrote:
    >> 
    >> Back to the ongoing saga of SIP Options ping not working. This one is a 
bit different though. Here is the scenario:
    >> 
    >>  • Can SSH into box fine and network connectivity is fine
    >>  • Find IP Address based SIP Trunk is UNREACHABLE. Can ping provider 
from the box
    >>  • Asterisk SIP Debug shows SIP Options sent but none received. This is 
also the case using tcpdump on the ppp0 interface
    >>  • Asterisk reload and Firewall restart did not fix the problem. The 
system needed a full reboot for the trunk to be REACHABLE
    >> 
    >> So my questions are:
    >>  • Is tcpdump BEFORE the firewall?
    >>  • Can you think of what the issue could be?
    >>  • What tests should I do next?
    >> 
    >> Unfortunately (or fortunately) this happens very infrequently so the fix 
will be a long confirmation period.
    >> 
    >> Thanks all!
    >> 
    >> Regards
    >> Michael Knill
    >> 
------------------------------------------------------------------------------
    >> Check out the vibrant tech community on one of the world's most
    >> engaging tech sites, Slashdot.org! 
http://sdm.link/slashdot_______________________________________________
    >> Astlinux-users mailing list
    >> Astlinux-users@lists.sourceforge.net
    >> https://lists.sourceforge.net/lists/listinfo/astlinux-users
    >> 
    >> Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.
    > 
    > 
    >    
------------------------------------------------------------------------------
    >    Check out the vibrant tech community on one of the world's most
    >    engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    >    _______________________________________________
    >    Astlinux-users mailing list
    >    Astlinux-users@lists.sourceforge.net
    >    https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    >    Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.
    > 
    > 
------------------------------------------------------------------------------
    > Check out the vibrant tech community on one of the world's most
    > engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    > _______________________________________________
    > Astlinux-users mailing list
    > Astlinux-users@lists.sourceforge.net
    > https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    > Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.
    
    
    
------------------------------------------------------------------------------
    Check out the vibrant tech community on one of the world's most
    engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    _______________________________________________
    Astlinux-users mailing list
    Astlinux-users@lists.sourceforge.net
    https://lists.sourceforge.net/lists/listinfo/astlinux-users
    
    Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to