Please check the two interface example  from
http://shorewall.net/two-interface.htm

And open the ports that you need for asterisk viz.

3178 for STUN UDP
4569 for IAX2 TCP
5060-5090 for SIP TCP
10000-20000 for RTP UDP

Hope this helps.

On 2/28/12, Costantino <[email protected]> wrote:
> I have a box with two NIC cards where I've installed Asterisk and Shorewall
>
> (the attached diagram can be best viewed when fonts is set to Courier New).
>
>
>
> The issue is that no phone is able to register with ASTERISK.
>
> When I enable SIP debugging in ASTERISK (SIP SET DEBUG IP <phone-IP>) no
>
> packets are displayed, whereas monitoring the NIC card with WireShark shows
> that
>
> the VoIP phone is sending REGISTER requests to Asterisk that ASTERISK
> doesn't answer.
>
>
>
> It looks to me as if ASTERISK doesn't listen at all on the LAN addresses,
>
> while it answers all those requests coming from the corporate LAN that
>
> are allowed by the SHOREWALL rules to go through.
>
>
>
> There is no difference in ASTERISK behaviour whether the LOCALNET and
> EXTERNIP
>
> lines are present or not in its SIP configuration file.
>
>
>
> Has anybody in this community had experience with such configuration who can
> provide me with hints on how to fix it?
>
>
>
> Thanks.
>
> ---------------------
>
>
>
>
>
>                             +-----------+
>
>                             | A         |
>
>              ph1 ph4        | S     S W |
>
> tele-        |   |    eth0 | T     H A | eth1     |      |   corporate
>
> phones     --+-+-+-+-------+ E     O L +------+---+-+--+-+--
>
> LAN          |     |       | R     R L |      |     |  |     LAN
>
>              ph2   phX      | I     E   |
>
>                             | X         |
>
>                             +-----------+
>
>
>
> Networking
>
> ----------
>
> telephones  LAN = 192.168.153.0/24  eth0 = 192.168.153.1
>
>
>
>    corporate LAN = 10.0.23.0/24  eth1 = 10.0.23.29  gateway = 10.0.23.1
>
>
>
> Shorewall: 3.4.6-1
>
>
>
> Telephony
>
> ---------
>
> Asterisk: asterisk-1.4.36-0
>
>
>
> file: /etc/asterisk/sip_general_custom.conf
>
>   localnet=192.168.153.0/255.255.255.0
>
>   externip=10.0.23.29
>
>
>
>
>
>
>
>
>
>
>
>
>
>

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to