On Tue, Feb 5, 2013 at 11:15 PM, Noam Birnbaum <[email protected]
> wrote:

> Hi folks,
>
> We have deployed the same configuration to about 3 different sites that
> are all having the same problem.
>
> They each have an Asterisk-based PBX behind a pfSense router (by Netgate)
> running 2.0.1.  [For some reason Netgate hasn't made 2.1 available yet.]
>
> Fairly frequently, but seemingly unpredictably -- like, a dozen times per
> day -- an incoming call will simply not go through; it'll drop before the
> caller hears a dialtone or anything. I spoke to the SIP trunk provider and
> they say they are sending SIP requests but receiving no response. The PBX
> itself has no record of any SIP requests coming in, which leads me to
> believe that for some reason the pfSense is dropping those incoming SIP
> requests.
>
> Port forwarding for SIP and RTP are set up just fine; the majority of
> calls work without trouble. Actually, one symptom seems to be that, after
> one or two calls in a row dropping as I've described, suddenly things will
> start working again and the problem won't be reproducible until it happens
> again in an hour or two.
>
> I would run a packet capture on the pfSense except that, since the problem
> is intermittent and it's running on an Alix board, I don't have enough disk
> space to save hours and hours of packet captures!
>
> Any ideas how else to troubleshoot?
>
>
One possibility is 'state mismatch', meaning that the SIP server is reusing
ports faster than your state pruning process on pfSense.

Look for state mismatch on pfSense logs or try tuning the timeouts of state
pruning to lower values.

Ermal


> Thanks!
> noam
>
> Noam Birnbaum
> Mac Daddy
> http://www.maccentricsolutions.com
> 877.luv.macs x666
> tweet @noamb
>
> Tech support —> 877.luv.macs or [email protected]
>
>
> _______________________________________________
> List mailing list
> [email protected]
> http://lists.pfsense.org/mailman/listinfo/list
>
>
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to