Re: [pfSense] SIP / Asterisk / PFSense - need to reset states of port 5060 connections

2013-01-10 Thread J. Echter
Am 10.01.2013 14:21, schrieb Chris Bagnall:
> On 10/1/13 1:06 pm, Jürgen Echter wrote:
>> we just use NAT (Port Forwarding) to access the ports on our server.
>> Im really interested how others solve this kind of trouble??
>
> Are you able to try putting the Asterisk box on a separate public IP
> and use either 1:1 NAT or a bridged OPT interface to get to it?
>
> FWIW, that's how we configure most of our Asterisk boxes with pfSense
> and we have not encountered the issue you mentioned.
>
> Kind regards,
>
> Chris
Hi Chris,

it on our ESX server. I could set it up to use a second network card and
plug it directly into the modem to use another ip of our public range.

I would have to try this on a weekend, also i would have to check if all
the functions are still working we have set up...

To me it seems as this is the only possible solution too...

Thanks for your response

cheers

juergen
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] SIP / Asterisk / PFSense - need to reset states of port 5060 connections

2013-01-10 Thread J. Echter
Am 10.01.2013 15:14, schrieb Guido Falsi:
> On 01/09/13 09:16, mayak-cq wrote:
>> On Wed, 2013-01-09 at 08:38 +0100, Jürgen Echter wrote:
>>
>> 
>>> suddenly it occurs that we are no more available from external and i
>>> have to reset states from port 5060 from our internal server to our sip
>>> provider.
>>>
>>> after that its working again.
>>>
>>> where can i look for this really annoying problem?
>> hi jurgen
>>
>> hmmm -- i have the same issue -- thought it was unique to my install.
>>
>> using embedded 2.01 on an Alix appliance with an openvpn tunnel to a
>> remote pfsense running full version (then to an asterisk server)
>>
>
> I was seeing the same problem on 2.0.1 on alix just doing NAT/Firewall
> work on a DSL connection. Now I have upgradted to 2.0.2 and this
> problem seems to be gone.
>
> I have other problems for which I'm inclined to put the blame on
> asterisk since they show up with peers on the same LAN too, but they
> do need some more investigation.
>
Hi,

im on pfSense 2.0.2.

Problem isn't gone, still there.

Also if i reboot our modem, same trouble. Not always but often...

Cheers Juergen
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] SIP / Asterisk / PFSense - need to reset states of port 5060 connections

2013-01-10 Thread Guido Falsi

On 01/09/13 09:16, mayak-cq wrote:

On Wed, 2013-01-09 at 08:38 +0100, Jürgen Echter wrote:



suddenly it occurs that we are no more available from external and i
have to reset states from port 5060 from our internal server to our sip
provider.

after that its working again.

where can i look for this really annoying problem?

hi jurgen

hmmm -- i have the same issue -- thought it was unique to my install.

using embedded 2.01 on an Alix appliance with an openvpn tunnel to a
remote pfsense running full version (then to an asterisk server)



I was seeing the same problem on 2.0.1 on alix just doing NAT/Firewall 
work on a DSL connection. Now I have upgraded to 2.0.2 and this problem 
seems to be gone.


I have other problems for which I'm inclined to put the blame on 
asterisk since they show up with peers on the same LAN too, but they do 
need some more investigation.


--
Guido Falsi 
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Multi WAN & CARP

2013-01-10 Thread WolfSec-Support
any hint ?

thanks in advance
stephan


2013/1/8 WolfSec-Support :
> Hello,
>
> following works:
>
> a)
> - 2 ISP's (via DHCP) - each on one box
> - 2 pfsenses
> - CARP on LAN IP
>
> in an outpost setup.
> so a box failure can be covered.
> also an ISP failure can be covered (manually, of automatically after
> editing somefiles)
> (to cover WAN link down, and not only box failures)
>
> following question
> - same setup, but:
> -- both boxes will have both ISP's via Multi WAN
>
> will this work ?
> how can I handle an ISP outage ?
>
> also master handles both ISP's, also in case of an ISP outage,
> and 2nd box will only work when master fails
> (this is what I expect)
>
> so:
> similar setup like a)
> but simply add multi WAN
>
> and B)
> if this works, does it also work with a 2nd ISP with PPPoE.
> There it must be locked, that only master dials in, and slave only in
> case of failure of the master box.
>
> any hint will be welcome
>
> thanks in advance
>
> stephan
>
> ps:
> now we are in final tests with pfsense, and it is really a great solution.
> then we will sponsor the project, too.
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] SIP / Asterisk / PFSense - need to reset states of port 5060 connections

2013-01-10 Thread mayak-cq
On Thu, 2013-01-10 at 14:06 +0100, Jürgen Echter wrote:
> Am 09.01.2013 09:16, schrieb mayak-cq:
> 
> > 
> > On Wed, 2013-01-09 at 08:38 +0100, Jürgen Echter wrote:
> > 
> >  
> > 
> > > suddenly it occurs that we are no more available from external and i 
> > > have to reset states from port 5060 from our internal server to our sip 
> > > provider.
> > > 
> > > after that its working again.



> > > where can i look for this really annoying problem?

hi jurgen

> > 
> > hmmm -- i have the same issue -- thought it was unique to my
> > install.
> > 
> > using embedded 2.01 on an Alix appliance with an openvpn tunnel to a
> > remote pfsense running full version (then to an asterisk server)
> > 
> > 
> > cheers
> > 
> > m 
> > 
> > 
> > ___
> > List mailing list
> > List@lists.pfsense.org
> > http://lists.pfsense.org/mailman/listinfo/list
> 
> Hi,
> 
> we just use NAT (Port Forwarding) to access the ports on our server.
> 
> Im really interested how others solve this kind of trouble??
> 
> Thanks 
> 
> Juergen


hi jurgen,

sounds like my install differs slightly from yours ...


remote office
central office

12 cisco voip phones  [switch]  [pfsense 2.01 embedded] 
internet  [pfsense 2.01 full]  [switch]- asterisk & phones
172.16.11.0/24  172.16.11.254   \ --
openvpen -- /172.16.1.254
172.16.1.0/24 
 

given that there is no natting between the phones and asterisk, i have
natting turned off. that said, the asterisk box has several sip trunks
[not shown] from the central office to voip providers -- those are
statically natted so that i send on port 5060 (which the voip provider
wants). it is noteworthy that the asterisk box has:

localnet=172.16.11.0/24
localnet=172.16.1.0/24

In a sip config file.

i am forced (maybe like you?) to clear the state table on the remote
office embedded, otherwise the phones wont register on the central
office asterisk. they can go for several days, then poof, the phones
fall off.

is this what you are seeing?

cheers

m




___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] SIP / Asterisk / PFSense - need to reset states of port 5060 connections

2013-01-10 Thread Chris Bagnall

On 10/1/13 1:06 pm, Jürgen Echter wrote:

we just use NAT (Port Forwarding) to access the ports on our server.
Im really interested how others solve this kind of trouble??


Are you able to try putting the Asterisk box on a separate public IP and 
use either 1:1 NAT or a bridged OPT interface to get to it?


FWIW, that's how we configure most of our Asterisk boxes with pfSense 
and we have not encountered the issue you mentioned.


Kind regards,

Chris
--
This email is made from 100% recycled electrons
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] SIP / Asterisk / PFSense - need to reset states of port 5060 connections

2013-01-10 Thread Jürgen Echter

Am 09.01.2013 09:16, schrieb mayak-cq:

On Wed, 2013-01-09 at 08:38 +0100, Jürgen Echter wrote:



suddenly it occurs that we are no more available from external and i
have to reset states from port 5060 from our internal server to our sip
provider.

after that its working again.

where can i look for this really annoying problem?

hi jurgen

hmmm -- i have the same issue -- thought it was unique to my install.

using embedded 2.01 on an Alix appliance with an openvpn tunnel to a 
remote pfsense running full version (then to an asterisk server)



cheers

m


___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list

Hi,

we just use NAT (Port Forwarding) to access the ports on our server.

Im really interested how others solve this kind of trouble??

Thanks

Juergen
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list