VOIP behind shorewall firewall not work

[Vinod_Parmar]

Hi All,

 

I have linksys pap2t VOIP adaptor which uses SIP protocol In its configuration 5061 and 5062 ports are bind for two voip links.

I have open ports using /etc/shorewall/rules

 

DNAT   net     loc:192.168.x.x           udp    5061
DNAT   net     loc:192.168.x.x           tcp     5061

But when I tried to call my voice not reached to other end I am able to hear voice from other end

If I bypass shorewall this VOIP device works perfectly.

 

Is there any other port or kernel module i need to install?

--
With Regards,
Vinod Parmar
(Mobile : - 9825414974)

[bhavin mehta]

Hi,

check sip port threw below command
 
cat /etc/services | grep sip

5060 and 5061 is sip protocol port

here is my output
 
cat /etc/services | grep sip
sip        5060/tcp            # Session Initiation Protocol
sip        5060/udp
sip-tls        5061/tcp
sip-tls        5061/udp

--
Thanks & regards,
Bhavin Mehta
complitech solution
(www.complitech.net)

[Vinod_Parmar]

 

 

I have already open all ports  .. 5060, 5061, 5062 both tcp and udp

[Kaushal Patel]

Hi,

I have one question regarding your VOIP configuration. Does your clients configure with NAT configuration in VOIP or all traffic goes through the VOIP server only?

It might require SIP plugin for iptables if required.

Regards,
Kaushal Palte

[Vinod_Parmar]

Local IP of VOIP adaptor is NAT as I mention before in shorewall rules and it is connect to SIP server.
There is a kernel module ip_conntrac_sip in my shorewall, is I require nf_conntrac_sip kernel module?

[ElectroMech :- Vibrant GNU/Linux User Group]

Hi,

On Sep 15, 4:14 pm, Vinod_Parmar <vinodpar...@gmail.com> wrote:
> Hi All,
>
> I have linksys pap2t VOIP adaptor which uses SIP protocol In its
> configuration 5061 and 5062 ports are bind for two voip links.
> I have open ports using /etc/shorewall/rules
>
> DNAT   net     loc:192.168.x.x           udp    5061
> DNAT   net     loc:192.168.x.x           tcp     5061
>  

Why you required to DNAT it ??
If you want to open it then it should be in allow in INPUT not as
DNAT.

I do not know what is your purpose to do that.

Nilesh J. Vaghela
ElectroMech

[Vinod_Parmar]

I have also tried this rule in shorewall but still I got same problem

 

ACCEPT  net     loc:192.168.40.105              udp     5061
ACCEPT  net     loc:192.168.40.105              tcp     5061
ACCEPT  net     loc:192.168.40.105              tcp     5060
ACCEPT  net     loc:192.168.40.105              udp     5060

 

[VGLUG Admin]

I had these problem in my server that was because of port 5061 and 5062 get
blocked . Now it is working ...saas [1]

[1] http://www.saaslisting.com

[Tajummal Abbass]

same problem with me user is get registered but not able to receive voice

is there any solution??? 

[riddhesh bhandari]

Hi,

VoIP has voice travelling through RTP and you need to open RTP port on your firewall. RTP is not listening only 1 port you need to open port range somewhere  around 10000-20000.

Checkout below link for your reference

https://support.onsip.com/hc/en-us/articles/203738274-What-ports-should-I-forward-on-my-NAT-device-to-make-SIP-work-?mobile_site=true

--
Please read http://www.catb.org/~esr/faqs/smart-questions.html before posting.
You received this message because you are subscribed to the "Vibrant GNU/Linux User Group".
To stop receiving emails from this group, mail to VGLUG+un...@googlegroups.com
To post to this group, send email to VG...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/VGLUG

---
You received this message because you are subscribed to the Google Groups "VGLUG" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vglug+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vglug/d8179cc5-676b-47c4-9598-b6d86fc33e0d%40googlegroups.com.

[Tajummal Abbass]

all the RTP ports are open but not able to receive voice and you please share your configuration files

my all files are attached below

Regards:Tajummal Hussain

To view this discussion on the web visit https://groups.google.com/d/msgid/vglug/CAELRBXh7mPLj69%2B44OR0TFZ5FR%2BtMsWGGBUi8TLAOjt7QmNceg%40mail.gmail.com.

[Tajummal Abbass]

i want to compile shorewall from its source code do you have any knowledge to compile shorewall from its master source code

regards: Tajummal