Topic: FreePBX and IAX

[Bud]

hope you guys can help

i have freepbx on sme 7.4 running with no problems
the lan softphones can register and are functional

i need 2 x iax remote softphone connections to the sme server
port forward udp 4569 to the sme 7.4 freepbx server has been done

my remote softphones cannot register on the freepbx server (using dyndns)
when i do a remote open port check on port 4569 i get a report that the port 4569 is NOT Open 

i need to urgently register the remote softphones to the freepbx server

any help greatly appreciated
 

[Teviot]

Bud

I sorry but I don't know the answer to your problem. But, if you get one of the moderator to more the typic to http://forums.contribs.org/index.php/board,20.0.html (Contribs.org > Contribs.org Forums > SME 7.x VoIP (Asterisk, SAIL etc) ), i'm sure that someone will have the answer you are looking for.

Or you could repost the problem there yourself

[Bud]

teviot thanks for your suggestion

did as you recommended

will report back about my findings

[cactus]

Moving this topic to SME 7.x VoIP (Asterisk, SAIL etc) where it is more appropriate.

[Franco]

Hi,
IAX uses UDP, so the port to be opened has to be using it instead of TCP.

Is your SME is behind a firewall?

[PWDasterisk]

you are describing networking issues not asterisk problems...

>are you sure the dyndns service has resolved to the correct IP address - use tracert to verify
>like Franco stated IAX2 uses UDP ports so it will not respond to ICMP (TCP Ping) requests so most port scanners won't tell you the UDP port is open
>if you are running SME Server with IPtable enabled the IAX2 port has to be allowed in that in addition to any firewall & router forwarding table

 

[Bud]

PWDasterisk and teviot thanks for your help

i am running sme7.4 in server mode and have ipcop running as my proxy/gateway server
i have port forward in ipcop udp 4569 and 10000 - 20000 to the sme server

PWDasterisk you asked " if you are running SME Server with IPtable enabled the IAX2 port has to be allowed in that in addition to any firewall & router forwarding table "

how do i do that in sme ? 

sorry for the noob questions

[Teviot]

Bud

Maybe if you describe how the internet gets inside to your internal network and the devices it has to pass though, that might give us a better idea on how to understand your situation and how to advise you better

Also... for my curiosity sake ... what is the IAX softphone software you are using?

Another thing ... I'm not sure that changing the IP Table will be of any advantage in your case!

[Bud]

teviot

i am using adsl and my router is set in bridge mode (ipcop is managing dialup)

the softphone client is ZOIPER

any ideas ?

[PWDasterisk]

if you are running SME in serveronly mode only then IPtables are not turned on...

you have to do some basic network verification and troubleshooting and post the results:

>did you do a tracert (windows) or traceroute (linux) from outside your network against your IPcop reported WAN IP address to verify the dyndns service is resolving correctly? this will eliminate internet routing as an issue.

>did you test the ZOIPER client internally to your network to those SAME extensions in FreePBX to make sure the IAX protocol and extensions are setup correctly before trying remote access? this will eliminate SME & FreePBX LAN issues as a source of the problems.

>are the remote clients also behind a firewall and do you know or can you control the remote networks setup?

[Bud]

PWDasterisk thanks for your help

1. >did you do a tracert (windows) or traceroute (linux) from outside your network against your IPcop reported WAN IP address to verify the dyndns service is resolving correctly? this will eliminate internet routing as an issue.

when i do a tracert i get

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

c:\tracert myfpxsmeserver.dnsalias.com

Tracing route to myfpbsmeserver.dnsalias.com [41.133.125.129]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  test.gateway [10.0.10.10]
  2    29 ms    29 ms    29 ms  41-133-124-1.dsl.iworld.co.au [41.133.124.1]
  3    34 ms    40 ms    38 ms  tengig-0-0-0-100.vic-ipc-2.iworld.co.au [196.22.163.206]
  4    32 ms    39 ms    39 ms  ccb-ap2522-1-gw.iworld.net [196.22.163.209]
  5    40 ms    38 ms    43 ms  41-133-66-1.dsl.iworld.co.au [41.133.66.1]
  6    60 ms    59 ms    59 ms  41-133-225-179.dsl.iworld.co.au [41.133.125.129]

Trace complete.

2. >did you test the ZOIPER client internally to your network to those SAME extensions in FreePBX to make sure the IAX protocol and extensions are setup correctly before trying remote access? this will eliminate SME & FreePBX LAN issues as a source of the problems.

Zoiper Client Internally on the Lan works fine infact when i vpn into the network remotely both sip and iax can be used with the zoiper client without any problems

3. >are the remote clients also behind a firewall and do you know or can you control the remote networks setup?

yes they are behind a firewall but that can easly be resolved, no problem there

any ideas? 

[Teviot]

3. >are the remote clients also behind a firewall and do you know or can you control the remote networks setup?

yes they are behind a firewall but that can easly be resolved, no problem there

any ideas? 

If there is a firewall at the IAX2 client side, I think if I understand firewalls correctly you will need to forward the same ports from the outside to the inside the same as for your PBX connection.

Let me know how you go

[PWDasterisk]

if everything works using a VPN then it's probably a firewall/NAT issues...

in Zoiper (ver 2.17):
Options >Show advanced options >Protocol options >STUN options:
   Enable STUN >Server Hostname/IP: stun.zoiper.com
   Enable STUN >Port: 3478
   Advance STUN options >Refresh period: 30
// this should help NAT port re-mapping issues //
 
Options >IAX accounts >YOUR_ACCOUNT:
Advanced account options >Registration expiry: 30
// this should help NAT port mapping timeouts //

if you are using a STUN sever and it still doesn't work see this article about IAX issues with NAT: http://www.voip-info.org/wiki/view/IAX

[Bud]

PWDasterisk thanks for your help

did what you said

if everything works using a VPN then it's probably a firewall/NAT issues...

in Zoiper (using ver 2.26):
Options >Show advanced options >Protocol options >STUN options:
   Enable STUN >Server Hostname/IP: stun.zoiper.com
   Enable STUN >Port: 3478
   Advance STUN options >Refresh period: 30
// this should help NAT port re-mapping issues //

Options >IAX accounts >YOUR_ACCOUNT:
Advanced account options >Registration expiry: 30
// this should help NAT port mapping timeouts //


same problem, still cannot conect to freepbx server from remote softphone (Zoiper using ver 2.26)

teviot thanks again for trying to help
i DISABLED the firewall on the Win7 PC where the Remote Softphone is installed
still cannot connect to freepbx server
as soon as i connect via vpn from the Win7 PC then ALL IS OK

What Now? 

any ideas

[PWDasterisk]

check the logs on all devices and see what devices, if any, the IAX packets are reaching on the server side...
   I don't use IPcop so you'll have to find out where the logs are located.
   I don't use FreePBX so you'll have to find out where those logs are located.

then you'll have to do packet traces for IAX at different points on the networks to see why and where the packets fail to route