Strange VOIP Problem

SnakeZZ

Hi all,

I have a very strange VOIP Problem. Certain calls just won't get through to my PBX, allthough others do and I can call out.
It seems these calls originate only from a certain provider, wereas others work fine.
I've configured everything according to https://doc.pfsense.org/index.php/PBX_VoIP_NAT_How-to

I have a zyxel modem in Bridge mode <-> PFsense <- VLAN -> PBX and all SIP settings have been made on the PBX only.
As I said, I can call out to everyone, others can reach me from mobile phones, just a certain set of incoming calls will not get through.

In the PFsense firewall logs I see the following upon an incoming call from these particular callers:


Apr 7 11:36:51	WAN	  217.0.23.100	  <wanip>UDP
Default deny rule IPv4 (1000000103)
Apr 7 11:36:51	WAN	  217.0.23.100:5060	  <wanip>:5064	UDP
Default deny rule IPv4 (1000000103)
Apr 7 11:36:50	WAN	  217.0.23.100	  <wanip>UDP
Default deny rule IPv4 (1000000103)
Apr 7 11:36:50	WAN	  217.0.23.100:5060	  <wanip>:5064	UDP
Default deny rule IPv4 (1000000103)
Apr 7 11:36:50	WAN	  217.0.23.100	  <wanip>UDP
Default deny rule IPv4 (1000000103)
Apr 7 11:36:50	WAN	  217.0.23.100:5060	  <wanip>:5064	UDP
Default deny rule IPv4 (1000000103)</wanip></wanip></wanip></wanip></wanip></wanip>

I have even put an easy rule into the firewalls, but this won't change anything.


States	Protocol	Source	Port	Destination	Port	Gateway	Queue	Schedule	Description	Actions
IPv4 TCP/UDP	217.0.23.100	*	WAN address	5064	*	none	 	Easy Rule: Passed from Firewall Log View

Does anyone have an idea on what is going on here?

Thank you and kind regards,

SnakeZZ

SnakeZZ

Anyone? :-\

Birke

Does it work if you modify the rule to


States	Protocol	Source	Port	Destination	Port	Gateway	Queue	Schedule	Description	Actions
IPv4 TCP/UDP	217.0.23.100	*	WAN address	*	*	none	 	Easy Rule: Passed from Firewall Log View

Do you have a NAT/Portforwarding where you have to add the source adress too?

Harvy66

In addition to Birke's questions, which interface did you add that rule to?

nelioromao

NAT is not the best option to have VOIP server. NAT can have same bad influence in VOIP Package and hard to debug.

I my opinion just bridge WAN Port with the port that you have your VOIP server."Create a DMZ"
And than you can use the static IP from your ISP direct on your VOIP server.

Same Sample info about NAT and VOIP

https://www.voip-info.org/wiki/view/NAT+and+VOIP
http://kb.smartvox.co.uk/voip-sip/sip-nat-problem/