• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Firewall optimization: conservative

Scheduled Pinned Locked Moved Firewalling
3 Posts 2 Posters 5.0k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    bullet92
    last edited by Dec 3, 2013, 11:17 AM Dec 3, 2013, 9:54 AM

    Hi all,
    i've some problem with voip and in order to resolve it i'm trying to do this: https://doc.pfsense.org/index.php/VoIP_Configuration.
    But my english is not so good enough to completely understand the mean of this:

    2. Set Conservative state table optimization - pf's default UDP timeouts are too low for some VoIP services. If your phones mostly work, but randomly disconnect, set "Firewall Optimization Options" to Conservative under System -> Advanced. Note this only works on 1.2.3-RC1 and newer as pf itself never increases UDP timeouts, our code changed to do this.

    So, in pfsense 2.1 if i set "Conservative", the UDP timeouts are increased?!

    Thanks in advance for your reply :)

    PS. My voip problem is that: phone are correctly registered, but when i call from external phone i cannot hear audio and after few seconds the call drop out.

    udp PBX sip ip:5060 <- CISCO phone adapter:5060 MULTIPLE:MULTIPLE
    udp CISCO phone adapter:5060 -> PBX sip ip:5060 MULTIPLE:MULTIPLE
    udp PBX sip ip:5060 <- CISCO phone adapter:5061 MULTIPLE:MULTIPLE
    udp CISCO phone adapter:5061 -> PBX sip ip:5060 MULTIPLE:MULTIPLE
    udp CISCO phone adapter:16436 <- PBX sip ip:10654 NO_TRAFFIC:SINGLE
    udp PBX sip ip:10654 -> PUBLIC_IP:39203 -> CISCO phone adapter:16436 SINGLE:NO_TRAFFIC
    udp CISCO phone adapter:16437 <- PBX sip ip:10655 NO_TRAFFIC:SINGLE
    udp PBX sip ip:10655 -> PUBLIC_IP:46085 -> CISCO phone adapter:16437 SINGLE:NO_TRAFFIC

    1 Reply Last reply Reply Quote 0
    • J
      jimp Rebel Alliance Developer Netgate
      last edited by Dec 3, 2013, 3:31 PM Dec 3, 2013, 2:28 PM

      Yes, if you set to conservative, the UDP timeouts increase.

      You can see the current timeouts on your system at Diagnostics > pfInfo

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 1
      • B
        bullet92
        last edited by Dec 3, 2013, 3:30 PM

        thanks for your reply :)

        1 Reply Last reply Reply Quote 0
        3 out of 3
        • First post
          3/3
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received