asterisk users - Nov 2006 - odd issue with IP tables

I put iptables on my asterisk box and an odd thing occurs. I allow 5060 and
10000-20000. As soon as I start iptables and make a call it literally takes
60-90 seconds before the call even starts to ring. As soon as I shut
iptables off, the call goes through immediately again. Its quite odd. The
call does eventually go through and talks fine but it takes sooo long to
connect. Anyone have some suggestions?

Thanks

Curt

Hi Curt,

I would try to find out what it's doing that's slowing your system down
so
much. Try turning up logging (or examining the logs) to see what's going on
there, or what it's waiting for. Off the top of my head, I'm wondering
if
you've blocked everything else, or have you allowed through the standard
fare? Ie. Have you allowed existing and related connections?

Also, where is iptables sitting? Is it on the local Asterisk box, or is it
on a firewall/router box in front of the Asterisk box?

Alex

On 11/18/06, Curt Shaffer <cshaffer@gmail.com>
wrote:
>
> I put iptables on my asterisk box and an odd thing occurs. I allow 5060
> and
> 10000-20000. As soon as I start iptables and make a call it literally
> takes
> 60-90 seconds before the call even starts to ring. As soon as I shut
> iptables off, the call goes through immediately again. Its quite odd. The
> call does eventually go through and talks fine but it takes sooo long to
> connect. Anyone have some suggestions?
>
> Thanks
>
> Curt
>
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>


-- 
Alex Robar
alex.robar@gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20061118/d5cb77c5/attachment.htm

Post your IP tables configuration here if it isn't too big.

Ron

> -----Original Message-----
> From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-
> bounces@lists.digium.com] On Behalf Of Curt Shaffer
> Sent: Saturday, November 18, 2006 5:05 PM
> To: 'Asterisk Users Mailing List - Non-Commercial Discussion'
> Subject: [asterisk-users] odd issue with IP tables
> 
> I put iptables on my asterisk box and an odd thing occurs. I allow 5060
> and
> 10000-20000. As soon as I start iptables and make a call it literally
> takes
> 60-90 seconds before the call even starts to ring. As soon as I shut
> iptables off, the call goes through immediately again. Its quite odd. The
> call does eventually go through and talks fine but it takes sooo long to
> connect. Anyone have some suggestions?
> 
> Thanks
> 
> Curt
> 
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users

On Sat, Nov 18, 2006 at 07:04:55PM -0600, Curt Shaffer
wrote:
> I put iptables on my asterisk box and an odd thing occurs. I allow 5060 and
> 10000-20000. As soon as I start iptables and make a call it literally takes
> 60-90 seconds before the call even starts to ring. As soon as I shut
> iptables off, the call goes through immediately again. Its quite odd. The
> call does eventually go through and talks fine but it takes sooo long to
> connect. Anyone have some suggestions?
You're almost certainly blocking DNS lookups, somewhere.

Cheers,
-- jra
-- 
Jay R. Ashworth                                                jra@baylink.com
Designer                          Baylink                             RFC 2100
Ashworth & Associates        The Things I Think                       
'87 e24
St Petersburg FL USA      http://baylink.pitas.com             +1 727 647 1274

	"That's women for you; you divorce them, and 10 years later,
	  they stop having sex with you."  -- Jennifer Crusie; _Fast_Women_