[OpenSIPS-Users] [OpenSIPS]: Firewall-Configuration

[Laszlo]

Please trace a call attempt with ngrep to see the message flow:

ngrep -q '' -W byline port 5060 -d any -t

and attach the results to your reply



On Tue, Jan 27, 2015 at 10:48 PM, Markus Klaus Schäffauer <
markus at mkschaeffauer.de> wrote:

>  Hi,
>
> now I created a new rule in my home-router permitting all traffic from the
> OpenSIPS-Server to the home-LAN.
>
> But I can neither see a call in "early stage" in the dialog-menu of the
> OpenSIPS control panel nor hear any ringing of the other phone.
>
> What is not clear to me: The phones are able to register to the OpenSIPS
> via port 5060 udp - but do I need to open other ports/protocols, too?
>
> With kind regards,
> Markus
>
>
>
> Am 27.01.2015 um 19:21 schrieb Laszlo:
>
> On Sun, Jan 25, 2015 at 10:00 PM, Markus Klaus Schäffauer <markus at mkschaeffauer.de> wrote:
>
>
>  Hello,
>
> now I have OpenSIPS running and two VoIP-Phones registered via my
> OpenSIPS (the registration of both is OK, as I can verify in the control
> panel of OpenSIPS and in the phones itself).
>
> In the OpenSIPS-Server, I opened the incoming port UDP 5060 in IPTABLES
> for incoming calls (in the moment still restricted to the dyndns of my
> home-IP = $IPTABLES -A INPUT -p udp -s xxx.xxx.xxx.xxx --dport 5060 -m
> state --state NEW,ESTABLISHED,RELATED -j ACCEPT) and permited the
> outgoing port UDP 5060 in IPTABLES for outgoing calls to any IP (=
> IPTABLES -A OUTPUT -p udp --dport 5060 -m state --state NEW -j ACCEPT).
>
> In my Home-Router, I opened the port UDP 5060 in IPTABLES for incoming
> calls for the two VoIP-Phones (i.e. their respective IP). And the
> outgoing requests are permited anyway.
>
> But I can not make/receive any call - I try to call from one VoIP-Phone
> to another (the traffic must leave my Home Network, enter the dedicated
> OpenSIP-Server, leave it and enter my Home Network). The calling
> VoIP-Phone is waiting some seconds and then indicating in it's display
> the message "Network failure".
>
> Is there something wrong in my concept?
> Or can you give me any hints why the connections might fail?
>
>
>
>  If I were you, I'd try without any iptables restrictions/rules first. Just
> to check if your call can hit the opensips box or not.
> If not, it's the time to look at your home router's config.
>
>
>
>
>
>  Thank you very much!
>
> Regards,
> Markus
>
>
>
>
> _______________________________________________
> Users mailing listUsers at lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> _______________________________________________
> Users mailing listUsers at lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>


-- 

--
Kind regards,
Laszlo Bekesi
http://voipfreak.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20150127/dd83d321/attachment.htm>