On 09/06/2010 02:53 AM, Sebastian Tänzer wrote: > Hello, Hi Sebastian,
> > I've recently set up our shorewall based firewall to use our GrandStream voip > phones connecting to sipgate.de. > I'm experiencing some problems as after some time (2-3 hours) the phones are > still registered but when calling > so. I can't hear them (but the other side can hear me). I had a similar problem, with a Asterisk PBX behind shorewall and remote iphones, this phones registerd but when RTP traffic appeared I got dest unreachable messages. What I did is read FAQ 77 and disable sip helpers, after that SIP and RTP traffic worked. NOTE: I was using sip helpers because a few local phones were connectiong to a hosted pbx and I used simple traffic shapping using sip helper for QoS, I had to change the way about simple traffic shapping. http://www.shorewall.net/FAQ.htm#faq77 Best regards. > > I tried different settings by checking the port forwardings, disabling STUN > and NAT on the device itself. > I can't tell if it works now (as I can hear the other side now) but will stop > working again in a couple of hours. > > Traffic logs with tshark show no errors, except this: > > 450.767075 192.168.10.253 -> 192.168.10.160 ICMP Destination unreachable > (Port unreachable) > > - and it's there almost each second. > > As you can see from the dump attached access between my fw (10.253) and > 10.160 is wide open. > 10.160 is my voip phone. > > Any ideas what this is about or should I ignore this message? > > Best, > Sebastian > > > > ------------------------------------------------------------------------------ > This SF.net Dev2Dev email is sponsored by: > > Show off your parallel programming skills. > Enter the Intel(R) Threading Challenge 2010. > http://p.sf.net/sfu/intel-thread-sfd > > > > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users -- Compugraf ------------------------------------------------------------------------------ This SF.net Dev2Dev email is sponsored by: Show off your parallel programming skills. Enter the Intel(R) Threading Challenge 2010. http://p.sf.net/sfu/intel-thread-sfd _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
