Problem with Freeswitch package
-
Check rules on lan and maybe disabling Block bogon networks could help
-
Tried that, no joy :(. Also tried blocking and unblock private networks etc from WAN.
Any other ideas? I might try putting another interface on, bind it to that and then see if it works. At least then I'll know if it is a problem with the WAN interface specifically, or something else…
-
So I made another interface, LAN2 with IP 192.168.3.1. I bound freeswitch to that IP and it works correctly from the LAN, I can register and get audio etc. So it must just be an issue with using it with WAN. Maybe coz WAN is pppoe ? or maybe coz WAN-LAN is NAT'd ?
In any case, I think it still should work, so any more ideas on what to try?
I guess I should try it on a second WAN interface. and see if it is all WAN interfaces or just the 1 that is causing the issue. -
Change your outbound to manual.
-
Ok, I've narrowed it down a little further.
Changing NAT Outbound to manual didn't work. Either did deleting all the NAT rules after chaning to manual (And successfully disabling any internet access, btw changing to auto again didn't fix it, I had to manually create some rules)
I created another WAN interface and set it up, and it exhibits the same behaviour… so I conclude that the issue only happens on WAN interfaces. So on this WAN interface I changed the gateway to "none" (I guess that means it isn't really a WAN interface anymore) and it works perfectly! So this is where the issue is happening.
Likewise from pfsense diagnostics -> ping, I can ping LAN addresses from this "WAN" interface without a gateway...
-
Any ideas anyone?
I'm just wondering if I should persist with this or what I am trying to do is unsupported or not supposed to work…
Thanks!
-
I will work, just take a look on docs.pfsense.org or this forum for manual outbound nat.
Change to manual and only create outbound nat rules for traffic leaving wan interface.
-
I've got it set to manual and this is the only rule I have in there… Even If I delete all rules it still doesn't work...
Interface Source Source Port Destination Destination Port NAT Address NAT Port Static Port Description
WAN 192.168.2.0/24 * * * * *
NOThe only things I can do to get it to work are:
Remove the gateway on the WAN interface
Disable all packet filteringEither of which are no good for my setup :(
-
if LAN is 192.168.2.0/24, outbound nat is fine, check lan rules now.
You must permit traffic fom LAN net to any on LAN interface.
-
I got frustrated and just allowed everything to everywhere on the firewall.
Both LAN and WAN interface are * * * * * * * as the first rule
Still no go…
It still seems to mimic the behaviour of pfSense diagnostics -> ping
I wonder if I should try installing pfSense 1.2.3 and see if it works on that.
-
I really doubt that issue has anything to do with your NAT or firewall rules, it's somewhere in your freeswitch or phone config. No idea where, I don't know a whole lot about freeswitch, but that's in general not the kind of symptoms you'd have with any NAT or firewall rule issues in that type of deployment.
1.2.3 and 2.0 will be the same in that regard.
-
updated subject and moved into the packages board, not sure if that will help it get better attention, but it's a freeswitch package issue.
-
I've set up pfSense 1.2.3 and installed the freeswitch-dev package and it seems to be working how I want it. Likewise pinging a LAN address from the WAN interface also works. I might try setting up a fresh pfSense 2.0.1 install and seeing if it works. Maybe I just messed up my networking config somehow.
-
Ok. Set up pfSense 2.0.1 again from scratch. Freeswitch package doesn't work on 2.0.1, so I installed fusionPBX again. Same issue as originally.
So to summarise my findings.
pfSense 1.2.3 with freeswitch-dev package worked.
pfSense 2.0.1 with FusionPBX didn't work (meaning cannot hear audio on the internal network, apart from that works fine).I still think the issue is with pfSense. In 1.2.3 you can ping internal hosts from the WAN interface, in 2.0.1 you cannot. Also in 2.0.1 it works fine if you disable packet filtering, or take the gateway off the WAN interface.
Anyway, I guess I will multi-home freeswitch and then access it internally from the internal IP and externally from the external IP. bah. I like pfSense too much to replace it for something else I can run freeswitch on how I want.
-
Thought I would chime in and mention that on a fresh PFSense (x86) 2.01 install, I was able to follow the steps on Mark's PBXFusion Wiki site and other than the svn issue that marcelloc helped me with to synch PBXFusion updates, the FreeSwitch manual install per the directions works for all intents and purposes on PFSense 2.01…the 32 bit variant. I'm using DynDNS on the PFSense 2.01 and phones on the LAN and WAN work. Not sure if this has any bearing on what you were doing or maybe it's enough of an incentive to keep trying. I'm using Aastra SIP phones, slightly older models and the Linux Twinkle SIP client as a softphone, no VLANs or anything beyond an out of the box setup on the network side of things.
All the best.
Shaun -
Thought I would chime in and mention that on a fresh PFSense (x86) 2.01 install, I was able to follow the steps on Mark's PBXFusion Wiki site and other than the svn issue that marcelloc helped me with to synch PBXFusion updates, the FreeSwitch manual install per the directions works for all intents and purposes on PFSense 2.01…the 32 bit variant. I'm using DynDNS on the PFSense 2.01 and phones on the LAN and WAN work. Not sure if this has any bearing on what you were doing or maybe it's enough of an incentive to keep trying. I'm using Aastra SIP phones, slightly older models and the Linux Twinkle SIP client as a softphone, no VLANs or anything beyond an out of the box setup on the network side of things.
All the best.
ShaunI was also able to get it to install a couple of weeks ago… I have had it running on 2.01 and also 2.1... I have a question for you, how were you and marcelloc able to get the updates to work? I haven't spend anytime on it trying it tho.. It was more to see if it would work on my box... some reason I would rather have a VoIP run on another box then my firewall..
-
I have a question for you, how were you and marcelloc able to get the updates to work?
All these updates are related to cyrrus-sasl and kerberos missing libraries. I've first tried to include sasl + tls to postfix(not done yet), then I saw freeradius with same issues as well subversion.
I haven't spend anytime on it trying it tho.. It was more to see if it would work on my box… some reason I would rather have a VoIP run on another box then my firewall..
freeswitch or asterisk could be a layer7 voip filtering daemon/proxy/gateway, just like squid, varnish and postfix do with it's own protocols.
I agree that a sip nat or sip proxy could do the job, it's just more options for admins :)
-
Thought I would chime in and mention that on a fresh PFSense (x86) 2.01 install, I was able to follow the steps on Mark's PBXFusion Wiki site and other than the svn issue that marcelloc helped me with to synch PBXFusion updates, the FreeSwitch manual install per the directions works for all intents and purposes on PFSense 2.01…the 32 bit variant. I'm using DynDNS on the PFSense 2.01 and phones on the LAN and WAN work. Not sure if this has any bearing on what you were doing or maybe it's enough of an incentive to keep trying. I'm using Aastra SIP phones, slightly older models and the Linux Twinkle SIP client as a softphone, no VLANs or anything beyond an out of the box setup on the network side of things.
All the best.
ShaunI was also able to get it to install a couple of weeks ago… I have had it running on 2.01 and also 2.1... I have a question for you, how were you and marcelloc able to get the updates to work? I haven't spend anytime on it trying it tho.. It was more to see if it would work on my box... some reason I would rather have a VoIP run on another box then my firewall..
Cino, Here's the whole saga on getting svn installed in order to synch the fusionPBX updates.
http://forum.pfsense.org/index.php/topic,41582.0.htmlShaun
-
Scratch that, jinxed by kartweel. After a reboot of the pfsense 2.01 hardware a minute ago, I now have no internal audio either…no IVR, or the internal FreePBX default recordings. They act like the are working, in other words one can press the appropriate keys for extensions after guessing at what stage the IVR is at and it appears to dial but no audible ring back...almost like one way audio which appears to be a common SIP/VoIP phone issue with a number of possible solutions all of them seemingly network related.
-
Scratch that, jinxed by kartweel. After a reboot of the pfsense 2.01 hardware a minute ago, I now have no internal audio either…no IVR, or the internal FreePBX default recordings. They act like the are working, in other words one can press the appropriate keys for extensions after guessing at what stage the IVR is at and it appears to dial but no audible ring back nor ringing on the destination phone.
Are you using freeswitch or asterisk? Freepbx is ready for freeswitch?
Can you check log files to see if you find any erros?
