I can not register via sip to iptel or sipgate and do not see sip into ethereal. I do not unterstand why thats Wudu .. but i am new to asterisk and sip. I am behind a susefirewall2 but asterisk even do not register if it is down. The asterisk is running onto the machine witch is connected to the internet. No answer seems coming back from iptel (sip debug in asterisk). Ports are open (5060, 10000:20000 rtp.conf ports are set to 10001-20000). Additionaly i can not trace the sip (port 5060) traffic into ethereal but in asterisk i can see. A internal sip-phone can register correct thx for help. nico here is my config if anybody can help: ----------------------------------------- [general] port = 5060 bindaddr = 190.100.200.1 externip = <extern ip> nat=1 localnet = 190.100.200.0 localmask = 255.255.255.0 context = default? srvlookup = yes? disallow=all??? allow=gsm register => <USER>:<PW>@iptel.org/<USER> [iptel] type=friend username=<USER> secret=<PW> host=iptel.de fromuser=<USER> fromdomain=iptel.de nat=Yes context=incomingsipgate canreinvite=no The sip debug log: -------------------- May ?5 13:27:26 WARNING[229391]: chan_sip.c:497 retrans_pkt: Maximum retries exceeded on call 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 for seqno 139 (Request) May ?5 13:27:40 NOTICE[229391]: chan_sip.c:3159 sip_reg_timeout: Registration for 'wurz25@195.37.77.101' timed out, trying again 11 headers, 0 lines Reliably Transmitting: REGISTER sip:iptel.org SIP/2.0 Via: SIP/2.0/UDP 80.171.10.133:5060;branch=z9hG4bK67698b27 From: <sip:wurz25@iptel.org>;tag=as0ee9b39a To: <sip:wurz25@iptel.org> Call-ID: 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 CSeq: 140 REGISTER User-Agent: Asterisk PBX Expires: 120 Contact: <sip:wurz25@80.171.10.133> Event: registration Content-Length: 0 ?(no NAT) to 195.37.77.101:5060 Retransmitting #1 (no NAT): REGISTER sip:iptel.org SIP/2.0 Via: SIP/2.0/UDP 80.171.10.133:5060;branch=z9hG4bK67698b27 From: <sip:wurz25@iptel.org>;tag=as0ee9b39a To: <sip:wurz25@iptel.org> Call-ID: 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 CSeq: 140 REGISTER User-Agent: Asterisk PBX Expires: 120 Contact: <sip:wurz25@80.171.10.133> Event: registration Content-Length: 0 X ?to 195.37.77.101:5060 Retransmitting #2 (no NAT): REGISTER sip:iptel.org SIP/2.0 Via: SIP/2.0/UDP 80.171.10.133:5060;branch=z9hG4bK67698b27 From: <sip:wurz25@iptel.org>;tag=as0ee9b39a To: <sip:wurz25@iptel.org> Call-ID: 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 CSeq: 140 REGISTER User-Agent: Asterisk PBX Expires: 120 Contact: <sip:wurz25@80.171.10.133> Event: registration Content-Length: 0
* nicolas albers; <albers@na-computer.de> on 06 May, 2004 wrote:>I can not register via sip to iptel or sipgate and do not see sip into >ethereal. > >I do not unterstand why thats Wudu .. but i am new to asterisk and sip. > >I am behind a susefirewall2 but asterisk even do not register if it is down. >The asterisk is running onto the machine witch is connected to the internet. >No answer seems coming back from iptel (sip debug in asterisk). >Ports are open (5060, 10000:20000 rtp.conf ports are set to 10001-20000).can you post the relevent parts of your /etc/sysconfig/SuSEfirewall2 ie. FW_SERVICES_EXT_UDP FW_SERVICES_INT_UDP FW_ALLOW_INCOMING_HIGHPORTS_UDP="" Also can you set the folowing uptions so logs will have a detailed input to see what is being dropped or accepted FW_LOG_DROP_CRIT="yes" ## Type: yesno ## Default: no # FW_LOG_DROP_ALL="yes" ## Type: yesno ## Default: yes # FW_LOG_ACCEPT_CRIT="yes" ## Type: yesno ## Default: no # FW_LOG_ACCEPT_ALL="yes" Make sure once you change the above logging options restart SuSEFirewall2 and create some sip traffic -- Togan Muftuoglu
Thanks for answer here the infos: FW settings: ------------- FW_SERVICES_EXT_UDP="5060 10000:20000" FW_SERVICES_INT_UDP="" FW_ALLOW_INCOMING_HIGHPORTS_UDP="YES" In the FW Log i do not see any traffic at port 5060 And no Traffic comming from iptel.org IP-Address. greetings nico Togan Muftuoglu wrote:> * nicolas albers; <albers@na-computer.de> on 06 May, 2004 wrote: >>I can not register via sip to iptel or sipgate and do not see sip into >>ethereal. >> >>I do not unterstand why thats Wudu .. but i am new to asterisk and sip. >> >>I am behind a susefirewall2 but asterisk even do not register if it is >>down. The asterisk is running onto the machine witch is connected to the >>internet. No answer seems coming back from iptel (sip debug in asterisk). >>Ports are open (5060, 10000:20000 rtp.conf ports are set to 10001-20000). > > can you post the relevent parts of your /etc/sysconfig/SuSEfirewall2 ie. > > FW_SERVICES_EXT_UDP > FW_SERVICES_INT_UDP > FW_ALLOW_INCOMING_HIGHPORTS_UDP="" > > Also can you set the folowing uptions so logs will have a detailed input > to see what is being dropped or accepted > > FW_LOG_DROP_CRIT="yes" > > ## Type: yesno > ## Default: no > # > FW_LOG_DROP_ALL="yes" > > ## Type: yesno > ## Default: yes > # > FW_LOG_ACCEPT_CRIT="yes" > > ## Type: yesno > ## Default: no > # > FW_LOG_ACCEPT_ALL="yes" > > Make sure once you change the above logging options restart > SuSEFirewall2 and create some sip traffic
Thanks for answer here the infos: FW settings: ------------- ?FW_SERVICES_EXT_UDP="5060?10000:20000" ?FW_SERVICES_INT_UDP="" ?FW_ALLOW_INCOMING_HIGHPORTS_UDP="YES" In the FW Log i do not see any traffic at port 5060 And no Traffic comming from iptel.org IP-Address. greetings nico Togan Muftuoglu wrote:> * nicolas albers; <albers@na-computer.de> on 06 May, 2004 wrote: >>I can not register via sip to iptel or sipgate and do not see sip into>>ethereal. >> >>I do not unterstand why thats Wudu .. but i am new to asterisk and sip. >> >>I am behind a susefirewall2 but asterisk even do not register if it is >>down. The asterisk is running onto the machine witch is connected to the >>internet. No answer seems coming back from iptel (sip debug in asterisk). >>Ports are open (5060, 10000:20000 rtp.conf ports are set to 10001-20000). > > can you post the relevent parts of your /etc/sysconfig/SuSEfirewall2 ie. > > FW_SERVICES_EXT_UDP > FW_SERVICES_INT_UDP > FW_ALLOW_INCOMING_HIGHPORTS_UDP="" > > Also can you set the folowing uptions so logs will have a detailed input > to see what is being dropped or accepted > > FW_LOG_DROP_CRIT="yes" > > ## Type: yesno > ## Default: no > # > FW_LOG_DROP_ALL="yes" > > ## Type: yesno > ## Default: yes > # > FW_LOG_ACCEPT_CRIT="yes" > > ## Type: yesno > ## Default: no > # > FW_LOG_ACCEPT_ALL="yes" > > Make sure once you change the above logging options restart > SuSEFirewall2 and create some sip traffic >
It is iptel.ORG not DE IPTEL ====== register=##username##:*******@iptel.org/##extension# [iptel] host=iptel.org type=friend username=##username## secret=******** fromuser=##username## fromdomain=iptel.org nat=yes qualify=yes context=iptel-inbound nicolas albers wrote:>I can not register via sip to iptel or sipgate and do not see sip into >ethereal. > >I do not unterstand why thats Wudu .. but i am new to asterisk and sip. > >I am behind a susefirewall2 but asterisk even do not register if it is down. >The asterisk is running onto the machine witch is connected to the internet. >No answer seems coming back from iptel (sip debug in asterisk). >Ports are open (5060, 10000:20000 rtp.conf ports are set to 10001-20000). > >Additionaly i can not trace the sip (port 5060) traffic into ethereal but in >asterisk i can see. >A internal sip-phone can register correct > >thx for help. >nico > > >here is my config if anybody can help: >----------------------------------------- >[general] >port = 5060 >bindaddr = 190.100.200.1 >externip = <extern ip> >nat=1 >localnet = 190.100.200.0 >localmask = 255.255.255.0 >context = default >srvlookup = yes >disallow=all >allow=gsm > >register => <USER>:<PW>@iptel.org/<USER> > >[iptel] >type=friend >username=<USER> >secret=<PW> >host=iptel.de >fromuser=<USER> >fromdomain=iptel.de >nat=Yes >context=incomingsipgate >canreinvite=no > >The sip debug log: >-------------------- >May 5 13:27:26 WARNING[229391]: chan_sip.c:497 retrans_pkt: Maximum retries >exceeded on call 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 for seqno 139 >(Request) >May 5 13:27:40 NOTICE[229391]: chan_sip.c:3159 sip_reg_timeout: Registration >for 'wurz25@195.37.77.101' timed out, trying again >11 headers, 0 lines >Reliably Transmitting: >REGISTER sip:iptel.org SIP/2.0 >Via: SIP/2.0/UDP 80.171.10.133:5060;branch=z9hG4bK67698b27 >From: <sip:wurz25@iptel.org>;tag=as0ee9b39a >To: <sip:wurz25@iptel.org> >Call-ID: 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 >CSeq: 140 REGISTER >User-Agent: Asterisk PBX >Expires: 120 >Contact: <sip:wurz25@80.171.10.133> >Event: registration >Content-Length: 0 > > (no NAT) to 195.37.77.101:5060 >Retransmitting #1 (no NAT): >REGISTER sip:iptel.org SIP/2.0 >Via: SIP/2.0/UDP 80.171.10.133:5060;branch=z9hG4bK67698b27 >From: <sip:wurz25@iptel.org>;tag=as0ee9b39a >To: <sip:wurz25@iptel.org> >Call-ID: 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 >CSeq: 140 REGISTER >User-Agent: Asterisk PBX >Expires: 120 >Contact: <sip:wurz25@80.171.10.133> >Event: registration >Content-Length: 0 > >X > > to 195.37.77.101:5060 >Retransmitting #2 (no NAT): >REGISTER sip:iptel.org SIP/2.0 >Via: SIP/2.0/UDP 80.171.10.133:5060;branch=z9hG4bK67698b27 >From: <sip:wurz25@iptel.org>;tag=as0ee9b39a >To: <sip:wurz25@iptel.org> >Call-ID: 5b23ed196b32e7673dbcf54b2c2dbaf0@190.100.200.1 >CSeq: 140 REGISTER >User-Agent: Asterisk PBX >Expires: 120 >Contact: <sip:wurz25@80.171.10.133> >Event: registration >Content-Length: 0 >_______________________________________________ >Asterisk-Users mailing list >Asterisk-Users@lists.digium.com >http://lists.digium.com/mailman/listinfo/asterisk-users >To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users > > >
* nicolas; <albers@na-computer.de> on 06 May, 2004 wrote:>Thanks for answer here the infos: > >FW settings: >------------- >?FW_SERVICES_EXT_UDP="5060?10000:20000" >?FW_SERVICES_INT_UDP="" >?FW_ALLOW_INCOMING_HIGHPORTS_UDP="YES"Himm am I right to understand that this box is not doing a gateway service, meaning no other machines are behind this machine. Or do you have a DSL/router infront of this machine and the router is doing the masquerading>In the FW Log i do not see any traffic at port 5060 >And no Traffic comming from iptel.org IP-Address.When you generete the traffic it should at least say the dropped connections serach for UDP 5060 and UDP 10000:20000 range. You have restarted the firewall after changing the logging options. Also have you configured /etc/asterisk/rtp.conf ( or relevant location depending on your setup) to have these ports -- Togan Muftuoglu
Ah and the best: if i trace the sip-phone (snom 200) i can see traffic if i connect the gui (it is a web interface). But no SIP traffic. Thats what i call "Das Grauen" or "Wudu". nicolas Togan Muftuoglu wrote:> * nicolas; <albers@na-computer.de> on 06 May, 2004 wrote: >>Thanks for answer here the infos: >> >>FW settings: >>------------- >>FW_SERVICES_EXT_UDP="5060?10000:20000" >>FW_SERVICES_INT_UDP="" >>FW_ALLOW_INCOMING_HIGHPORTS_UDP="YES" > > Himm am I right to understand that this box is not doing a gateway > service, meaning no other machines are behind this machine. > > Or do you have a DSL/router infront of this machine and the router is > doing the masquerading > >>In the FW Log i do not see any traffic at port 5060 >>And no Traffic comming from iptel.org IP-Address. > > When you generete the traffic it should at least say the dropped > connections serach for UDP 5060 and UDP 10000:20000 range. You have > restarted the firewall after changing the logging options. > > Also have you configured /etc/asterisk/rtp.conf ( or relevant location > depending on your setup) to have these ports >
Solved ! Is was so: All configs was right but there was a little error in the network configuration (do not know why or if it is an error, should make no matter). The DNS-Server entry for the internal network-card has the external dns-server ip, have set it on the internal (forwarding). now is works ! :) :) :) But why is was not running since we work with ip-addresses ? Wudu ! Thanks all spec. you Togan for help. Hope this will help any other users, was a strange config error. Now i will solve the isdn call forwarding problem i have, greetings nicolas Togan Muftuoglu wrote:> * nicolas; <albers@na-computer.de> on 06 May, 2004 wrote: >>Hi, >> >>> Himm am I right to understand that this box is not doing a gateway >>> service, meaning no other machines are behind this machine. >> >>This box is doing gateway services, but * is on it too. >> > > OK > >> >>> * nicolas; <albers@na-computer.de> on 06 May, 2004 wrote: >>>>Thanks for answer here the infos: >>>> >>>>FW settings: >>>>------------- >>>>FW_SERVICES_EXT_UDP="5060?10000:20000" > > You have to allow the internal machines to reach to UDP ports > > > FW_SERVICES_INT_UDP="5060 10000:20000" > > > Hope this works >