> On 9/09/2021, at 6:23 AM, Marek Greško <mgresko8 at gmail.com> wrote:
>
> Hello,
>
> I confirm temporarily allowing all the udp communication from the nat
> ip address solved the problem, so the problem lies in the nftables.
> This is probably not the right forum to continue. Or is it? Does
> anybody have wide experience with nftables and sip?
If you publish your rule set then we could look. Did you write the rules? What
have you checked so far?
>
> Thanks
>
> Marek
>
>
> 2021-09-07 10:40 GMT+02:00, Antony Stone <Antony.Stone at
asterisk.open.source.it>:
>> On Monday 06 September 2021 at 23:05:27, Duncan Turnbull wrote:
>>
>>>>> On 7/09/2021, at 8:30 AM, Marek Greško <mgresko8 at
gmail.com> wrote:
>>>>>
>>>>> Hello,
>>>>>
>>>>> it is only local nftables with nf_conntrack_sip on the
asterisk
>>>>> server. Probably a kernel bug? It did not trigger with
previous
>>>>> providers since they had working SIP ALG. Now I hear no
audio in both
>>>>> directions because outgoing rtp stream from asterisk goes
to private
>>>>> address space and incoming stream is blocked. So the
outgoing rtp
>>>>> could not be learnt to send to nat addess.
>>>
>>> Maybe a bug but that’s less likely than a config error. Time to
debug your
>>> nftables.
>>
>> Try temporarily simply turning the firewall off - allow all traffic
through
>> (although leave in place any NAT rules).
>>
>> If you then find that RTP works, you know where the problem lies.
>>
>>
>> Antony.
>>
>> --
>> Perfection in design is achieved not when there is nothing left to add,
but
>> rather when there is nothing left to take away.
>>
>> - Antoine de Saint-Exupery
>>
>> Please reply to the
list;
>> please
*don't* CC
>> me.
>>
>> --
>> _____________________________________________________________________
>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>>
>> Check out the new Asterisk community forum at:
>> https://community.asterisk.org/
>>
>> New to Asterisk? Start here:
>> https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>>
>> asterisk-users mailing list
>> To UNSUBSCRIBE or update options visit:
>> http://lists.digium.com/mailman/listinfo/asterisk-users
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
https://community.asterisk.org/
>
> New to Asterisk? Start here:
> https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
> http://lists.digium.com/mailman/listinfo/asterisk-users