asterisk users - Jun 2020 - Voice broken during calls (again...)

Am 23.06.2020 14:49, schrieb Marek Greško:

Hi Marek,
> this could be ip address of the different interface on the same box. I
> think it works like expected. The only exception would be if the sip
> peer ignores the icmp packet unreachable. But I doubt this is the
Do you mean "my Linux-Box ignores ICMP packet unreachable" or
"Deutsche
Telekom ignores them"?
> case. Anyway you get problems also when calling to LTE phone without
> using sip provider.
I have problem calling someone outside my networks and I have problem if 
the peers are in different networks...
> Let first concentrate on these calls LTE to LAN. Are you sure you do
> not block incoming icmp unreachables? At least verify type 3 subtype 4
> is enabled. If it is, I have no clue what is going on.
Well, I limit incoming ICMP packets and I block some hosts (known 
crackers)...
If you think, I can send you the script I use (with iptables) to manage 
my firewall, so you can check it...
The only entries I have, having something to do with ICMP, are:

----------------------------------
/bin/echo -n "Disable ICMP Redirect acceptance..."
for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do
   /bin/echo 0 > $f
done
/bin/echo "done."
/sbin/iptables -A INPUT -i dsl0 -p icmp --icmp-type echo-request -m 
limit --limit 6/m --limit-burst 5 -j ACCEPT
/sbin/iptables -A FORWARD -o dsl0 -p icmp -j ACCEPT
----------------------------------

and of course other rules to allow ICMP pakets in the internal 
networks...

Thanks a lot
Luca Bertoncello
(lucabert at lucabert.de)

Hi Luca,

On 6/23/20 8:02 AM, Luca Bertoncello wrote:
>
> I have problem calling someone outside my networks and I have problem 
> if the peers are in different networks...
I may have missed this originally - are you saying you have trouble when 
internal phones call each other, if they are on different VLAN's?  
That's a pretty big deal.

I didn't see my post with the graphs of inter-packet latency make it to 
the list (moderator?), I think the images were too large.  Recall that 
clearly showed half of the packets coming inbound from DT were 
*missing*, which confirms your audio experience.  I don't think that 
fact has been addressed properly - it is the only smoking gun you have 
so far.  If that is also happening inter-VLAN, something is seriously 
wrong on the Pi.

If you can reproduce this can you send me a few more packet traces, from 
each of the VLAN interfaces involved?

Always looking for real-world data to improve our tools :)

Cheers,

-- 

	*Jeff LaCoursiere*
STRATUSTALK, INC. / CTO

Phone: 	*+1 703.496.4990 x108*
Mobile: 	*+1 815.546.6599*
Email: 	*jeff at stratustalk.com* <mailto:jeff at stratustalk.com>
Website: 	*https://www.stratustalk.com*
Address: 	*One Freedom Square
13th Floor
Reston, VA 20190*

<https://www.facebook.com/jeff.lacoursiere> 
<https://linkedin.com/in/jeff-lacoursiere-884361> 
<https://www.twitter.com/stratustalk>


-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20200623/1738ba01/attachment.html>

Am 23.06.2020 15:15, schrieb Jeff LaCoursiere:

Hi Jeff,
>> I have problem calling someone outside my networks and I have
>> problem if the peers are in different networks...
> 
> I may have missed this originally - are you saying you have trouble
> when internal phones call each other, if they are on different VLAN's?
>  That's a pretty big deal.
There were the results of my yesterday's tests...
If both mobile phones using SIP via LTE or both phones are in the same 
VLAN, the quality is excellent, otherwise it's bad to very bad...

But the very problem is, that all other communication between the VLANs 
don't have any problem?!?
I can transfer GB and don't have any issue...

I'm really confused...
> I didn't see my post with the graphs of inter-packet latency make it
> to the list (moderator?), I think the images were too large.  Recall
> that clearly showed half of the packets coming inbound from DT were
> *missing*, which confirms your audio experience.  I don't think that
> fact has been addressed properly - it is the only smoking gun you have
> so far.  If that is also happening inter-VLAN, something is seriously
> wrong on the Pi.
Well, probabilly not on the PI, since, as I sayd, communication with 
both peers in the same interface work correct, but maybe my firewall 
script...
> If you can reproduce this can you send me a few more packet traces,
> from each of the VLAN interfaces involved?
Of course, I can do that!
Maybe I get it this evening.

Regards
Luca Bertoncello
(lucabert at lucabert.de)

2020-06-23 15:02 GMT+02:00, Luca Bertoncello <lucabert at
lucabert.de>:
> Am 23.06.2020 14:49, schrieb Marek Greško:
>
> Hi Marek,
>
>> this could be ip address of the different interface on the same box. I
>> think it works like expected. The only exception would be if the sip
>> peer ignores the icmp packet unreachable. But I doubt this is the
>
> Do you mean "my Linux-Box ignores ICMP packet unreachable" or
"Deutsche
> Telekom ignores them"?
I meant DT, but this was a speculation. I did not say they do. I
consider it highly improbable. Then I was asking whether you do. As
per configuration you sent you are not blocking icmp type 3 so this
should not be an issue.
>
>> case. Anyway you get problems also when calling to LTE phone without
>> using sip provider.
>
> I have problem calling someone outside my networks and I have problem if
> the peers are in different networks...
>
>> Let first concentrate on these calls LTE to LAN. Are you sure you do
>> not block incoming icmp unreachables? At least verify type 3 subtype 4
>> is enabled. If it is, I have no clue what is going on.
>
> Well, I limit incoming ICMP packets and I block some hosts (known
> crackers)...
> If you think, I can send you the script I use (with iptables) to manage
> my firewall, so you can check it...
> The only entries I have, having something to do with ICMP, are:
>
> ----------------------------------
> /bin/echo -n "Disable ICMP Redirect acceptance..."
> for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do
>    /bin/echo 0 > $f
> done
> /bin/echo "done."
> /sbin/iptables -A INPUT -i dsl0 -p icmp --icmp-type echo-request -m
> limit --limit 6/m --limit-burst 5 -j ACCEPT
> /sbin/iptables -A FORWARD -o dsl0 -p icmp -j ACCEPT
> ----------------------------------
>
> and of course other rules to allow ICMP pakets in the internal
> networks...
>
> Thanks a lot
> Luca Bertoncello
> (lucabert at lucabert.de)
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>       https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users

Am 23.06.2020 15:43, schrieb Marek Greško:

Hi
>> Do you mean "my Linux-Box ignores ICMP packet unreachable" or
>> "Deutsche
>> Telekom ignores them"?
> 
> I meant DT, but this was a speculation. I did not say they do. I
> consider it highly improbable. Then I was asking whether you do. As
> per configuration you sent you are not blocking icmp type 3 so this
> should not be an issue.
OK, so this should not be the problem...
What can we check now?
If you want, I can send my iptables-script. It is possible, that I have 
there an error causing this behaviour...

Maybe someone in the list is an expert with iptables and can check it?
I know this program, but I'm not really an expert...

Thanks
Luca Bertoncello
(lucabert at lucabert.de)