Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Dropped Calls - 3CX & FlowRoute with PFSense FireWall

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W Offline
      Whitey436
      last edited by

      I am having a random issue when running a 3CX soft PBX using FlowRoute as my SIP trunk provider.

      When connected on a call on average about 15-30 minutes into the call, it will drop the call.  This when on for a few months and I finally changed the network design such that the 3CX server is now not flowing through the PFSense but rather directly to the public connection.

      I have been running this config for a week now and have had no dropped calls.  I would very much prefer to run all traffic though the PF F/W but cannot afford the aggravation of having to deal with dropped calls.

      Does anyone have any ideas on what might be causing this behavior?

      Many thanks!

      1 Reply Last reply Reply Quote 0
      • M Offline
        marvosa
        last edited by

        Reading other posts, it sounds like it might be a state timeout issue.  It's been suggested that switching the Firewall Optimization Options (System-> Advanced-> Firewall and NAT tab) to "conservative" may help.  Apparently typing "pfctl -st" in the console shows you the timings.

        Below are the normal values.  The fact that the "tcp.closing" timing matches up with your 15 min. disconnect issue is probably not a coincidence :

        [2.2.6-RELEASE][admin@pfsense.hybrid.home]/: pfctl -st
        tcp.first                   120s
        tcp.opening                  30s
        tcp.established           86400s
        tcp.closing                 900s
        tcp.finwait                  45s
        tcp.closed                   90s
        tcp.tsdiff                   30s
        udp.first                    60s
        udp.single                   30s
        udp.multiple                 60s
        icmp.first                   20s
        icmp.error                   10s
        other.first                  60s
        other.single                 30s
        other.multiple               60s
        frag                         30s
        interval                     10s
        adaptive.start           481800 states
        adaptive.end             963600 states
        src.track                     0s
        
        

        Here are the conservative timings:

        [2.2.6-RELEASE][admin@pfsense.hybrid.home]/: pfctl -st
        tcp.first                  3600s
        tcp.opening                 900s
        tcp.established          432000s
        tcp.closing                3600s
        tcp.finwait                 600s
        tcp.closed                  180s
        tcp.tsdiff                   60s
        udp.first                   300s
        udp.single                  150s
        udp.multiple                900s
        icmp.first                   20s
        icmp.error                   10s
        other.first                  60s
        other.single                 30s
        other.multiple               60s
        frag                         30s
        interval                     10s
        adaptive.start           481800 states
        adaptive.end             963600 states
        src.track                     0s
        
        
        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.