Firewall optimization: conservative

bullet92

Hi all,
i've some problem with voip and in order to resolve it i'm trying to do this: https://doc.pfsense.org/index.php/VoIP_Configuration.
But my english is not so good enough to completely understand the mean of this:

2. Set Conservative state table optimization - pf's default UDP timeouts are too low for some VoIP services. If your phones mostly work, but randomly disconnect, set "Firewall Optimization Options" to Conservative under System -> Advanced. Note this only works on 1.2.3-RC1 and newer as pf itself never increases UDP timeouts, our code changed to do this.

So, in pfsense 2.1 if i set "Conservative", the UDP timeouts are increased?!

Thanks in advance for your reply :)

PS. My voip problem is that: phone are correctly registered, but when i call from external phone i cannot hear audio and after few seconds the call drop out.

udp PBX sip ip:5060 <- CISCO phone adapter:5060 MULTIPLE:MULTIPLE
udp CISCO phone adapter:5060 -> PBX sip ip:5060 MULTIPLE:MULTIPLE
udp PBX sip ip:5060 <- CISCO phone adapter:5061 MULTIPLE:MULTIPLE
udp CISCO phone adapter:5061 -> PBX sip ip:5060 MULTIPLE:MULTIPLE
udp CISCO phone adapter:16436 <- PBX sip ip:10654 NO_TRAFFIC:SINGLE
udp PBX sip ip:10654 -> PUBLIC_IP:39203 -> CISCO phone adapter:16436 SINGLE:NO_TRAFFIC
udp CISCO phone adapter:16437 <- PBX sip ip:10655 NO_TRAFFIC:SINGLE
udp PBX sip ip:10655 -> PUBLIC_IP:46085 -> CISCO phone adapter:16437 SINGLE:NO_TRAFFIC

jimp

Yes, if you set to conservative, the UDP timeouts increase.

You can see the current timeouts on your system at Diagnostics > pfInfo

bullet92

thanks for your reply :)