asterisk users - Jun 2020 - Voice broken during calls (again...)

Am 23.06.2020 10:07, schrieb Marek Greško:

Hi
> this is a correct response:
> 
> From 62.156.246.57 (62.156.246.57) icmp_seq=1 Frag needed and DF set
> (mtu = 1492)
> 
> So PMTU discovery is working. No problem here. You got correct message
> to lower the packet size from 62.156.246.57. This is probably the last
> hop before your site.
No, the last hop is 62.156.246.65:

lucabert at ns:~$ mtr -4nr bpi.d.lucabert.com
Start: Tue Jun 23 10:10:16 2020
HOST: ns.lucabert.de              Loss%   Snt   Last   Avg  Best  Wrst 
StDev
   1.|-- 185.242.112.1              0.0%    10    0.4   1.1   0.3   4.4   
1.2
   2.|-- 84.200.230.82              0.0%    10    0.8   0.7   0.5   0.8   
0.0
   3.|-- 87.190.233.113             0.0%    10    1.6   1.7   1.4   2.5   
0.0
   4.|-- 217.5.82.94                0.0%    10    7.9   7.6   7.4   7.9   
0.0
   5.|-- 217.5.82.94                0.0%    10    7.7   7.5   7.2   7.7   
0.0
   6.|-- 62.156.246.49              0.0%    10    7.4   7.4   7.3   7.4   
0.0
   7.|-- 62.156.246.65              0.0%    10    7.6   7.6   7.4   7.8   
0.0
   8.|-- 93.241.91.232              0.0%    10   21.4  21.9  21.4  24.3   
0.7

Don't know where this 62.156.246.57 comes... :(

Everyway: you think, my network works as expected? At least the part 
using DSL?
Any idea, where could be the problem?

Thanks a lot
Luca Bertoncello
(lucabert at lucabert.de)

Hello,

this could be ip address of the different interface on the same box. I
think it works like expected. The only exception would be if the sip
peer ignores the icmp packet unreachable. But I doubt this is the
case. Anyway you get problems also when calling to LTE phone without
using sip provider.

Let first concentrate on these calls LTE to LAN. Are you sure you do
not block incoming icmp unreachables? At least verify type 3 subtype 4
is enabled. If it is, I have no clue what is going on.

Marek



Marek


2020-06-23 10:11 GMT+02:00, Luca Bertoncello <lucabert at
lucabert.de>:
> Am 23.06.2020 10:07, schrieb Marek Greško:
>
> Hi
>
>> this is a correct response:
>>
>> From 62.156.246.57 (62.156.246.57) icmp_seq=1 Frag needed and DF set
>> (mtu = 1492)
>>
>> So PMTU discovery is working. No problem here. You got correct message
>> to lower the packet size from 62.156.246.57. This is probably the last
>> hop before your site.
>
> No, the last hop is 62.156.246.65:
>
> lucabert at ns:~$ mtr -4nr bpi.d.lucabert.com
> Start: Tue Jun 23 10:10:16 2020
> HOST: ns.lucabert.de              Loss%   Snt   Last   Avg  Best  Wrst
> StDev
>    1.|-- 185.242.112.1              0.0%    10    0.4   1.1   0.3   4.4
> 1.2
>    2.|-- 84.200.230.82              0.0%    10    0.8   0.7   0.5   0.8
> 0.0
>    3.|-- 87.190.233.113             0.0%    10    1.6   1.7   1.4   2.5
> 0.0
>    4.|-- 217.5.82.94                0.0%    10    7.9   7.6   7.4   7.9
> 0.0
>    5.|-- 217.5.82.94                0.0%    10    7.7   7.5   7.2   7.7
> 0.0
>    6.|-- 62.156.246.49              0.0%    10    7.4   7.4   7.3   7.4
> 0.0
>    7.|-- 62.156.246.65              0.0%    10    7.6   7.6   7.4   7.8
> 0.0
>    8.|-- 93.241.91.232              0.0%    10   21.4  21.9  21.4  24.3
> 0.7
>
> Don't know where this 62.156.246.57 comes... :(
>
> Everyway: you think, my network works as expected? At least the part
> using DSL?
> Any idea, where could be the problem?
>
> Thanks a lot
> Luca Bertoncello
> (lucabert at lucabert.de)
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>       https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users

Am 23.06.2020 14:49, schrieb Marek Greško:

Hi Marek,
> this could be ip address of the different interface on the same box. I
> think it works like expected. The only exception would be if the sip
> peer ignores the icmp packet unreachable. But I doubt this is the
Do you mean "my Linux-Box ignores ICMP packet unreachable" or
"Deutsche
Telekom ignores them"?
> case. Anyway you get problems also when calling to LTE phone without
> using sip provider.
I have problem calling someone outside my networks and I have problem if 
the peers are in different networks...
> Let first concentrate on these calls LTE to LAN. Are you sure you do
> not block incoming icmp unreachables? At least verify type 3 subtype 4
> is enabled. If it is, I have no clue what is going on.
Well, I limit incoming ICMP packets and I block some hosts (known 
crackers)...
If you think, I can send you the script I use (with iptables) to manage 
my firewall, so you can check it...
The only entries I have, having something to do with ICMP, are:

----------------------------------
/bin/echo -n "Disable ICMP Redirect acceptance..."
for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do
   /bin/echo 0 > $f
done
/bin/echo "done."
/sbin/iptables -A INPUT -i dsl0 -p icmp --icmp-type echo-request -m 
limit --limit 6/m --limit-burst 5 -j ACCEPT
/sbin/iptables -A FORWARD -o dsl0 -p icmp -j ACCEPT
----------------------------------

and of course other rules to allow ICMP pakets in the internal 
networks...

Thanks a lot
Luca Bertoncello
(lucabert at lucabert.de)