PfSense is blocking outbound Trixbox (SIP) ports

Jakobud

Setting up a Trixbox (http://fonality.com/trixbox/) (like Asterisk or FreePBX) for VoIP on our network today. During the setup there is a diagnostic test that tests your outbound ports. It requires the following outbound ports on the network to be open

UDP 5060
UDP 10278
UDP 15335
UDP 4569
TCP 6600
TCP 5222

The diagnostic is saying that all ports are blocked.

Looking in pfSense at the Firewall > Rules > LAN section, it is wide open. No restrictions:


Proto	Source	Port            Destination	Port	Gateway	Schedule	Description	

*                      LAN net	 *	                *	*	        *	  	 LAN > Anywhere

That's the only rule. That means everything is wide open right? To my understanding that means there is nothing blocking any outbound ports.

Also on the trixbox itself the firewall is completely disabled.

Any idea where I should be looking to diagnose this?

Metu69salemi

Everything is wide open from inside to outside. there reads "LAN net" as an source.
You might want to add alias for those ports
and then create wan rule which allows:

proto: tcp/udp
Source port: *
Source: *
Destination port: your alias
Destination: LAN NET (or more preferably: voip alias)

mlanner

Jakobud,

I think you need to create a Manual Outbound NAT (AON) rule for the trixbox to work properly. Just set it to AON and create a rule for the IP address of your trixbox and set port to static "YES" and it should work. At least it has worked fine for me several times.