IAX2 not going out after a while
-
Hello,
I've experienced this same issue with a number of pfsense boxes:
I have an Asterisk VOIP server sitting on the LAN port of a very simple PFSense firewall system. So simple, it could be the default configuration. The VOIP server communicates with a VOIP provider via an IAX2 UDP connection.
This works fine, but after a few days, suddenly the IAX2 packets stop going out to the WAN. I've used tcpdump to verify that the IAX2 packets come in the LAN port, but never exit the WAN port.
I did a search thru the rules - nothing blocking. I did a search on the states for the IP address of the IAX2 provider, nothing. Yet when I reset the states, it starts working again... For an undetermined amount of time, then stops again.
This happens on multiple PFSense boxes, so I know its not just a fluke with one. I've also seen a few other messages with people having similar situations, with no apparent resolve. How can I help to resolve this?
Bob
-
Check for open states when it stops passing the traffic. If packets arrive at the LAN port there should be at least a state for it there unless the firewall is blocking it for some reason.
If there are states but it never leaves the WAN then it's either: trying to use some other route, has no route at all, is being collected by IPSec, or is blocked outbound for some reason.
