[jperry22]

I'm trying to set up my first * server using the latest version of Asterisk@home behind a Linksys WRT54GS using Alchemy-pre7a v3.37.6.8sv. I have opened ports 5060 and 10000-20000 in the Linksys pointed to the * box. So far I have had no success in getting anything to work. I show that I'm registered with FWD but I cannot make or receive calls. I have the * box hooked to a Sipura 841 and it shows registered. A couple of very knowledgeable VoIP experts have looked at the config and cannot figure out the problem either. The ISP is RoadRunner residential (cable). http://www.grc.com shows that all the ports in question are reachable (not blocked).

Does anyone have any ideas what I can try?

[PhoneBoy]

I suspect there's a problem in the registration that's being sent to FWD and FWD is trying to communicate with the wrong IP address. You should probably take some tcpdump captures of the communication between your Asterisk server and fwd.pulver.com to see if the registrations look right.

Originally Posted by jperry22

I'm trying to set up my first * server using the latest version of Asterisk@home behind a Linksys WRT54GS using Alchemy-pre7a v3.37.6.8sv. I have opened ports 5060 and 10000-20000 in the Linksys pointed to the * box. So far I have had no success in getting anything to work. I show that I'm registered with FWD but I cannot make or receive calls. I have the * box hooked to a Sipura 841 and it shows registered. A couple of very knowledgeable VoIP experts have looked at the config and cannot figure out the problem either. The ISP is RoadRunner residential (cable). http://www.grc.com shows that all the ports in question are reachable (not blocked).

Does anyone have any ideas what I can try?

enable telnet, login with the username of root, the password is the same as the web admin one, issue this command and post the results:

iptables -t nat -nvL

[jperry22]

Originally Posted by digiblur

enable telnet, login with the username of root, the password is the same as the web admin one, issue this command and post the results:

iptables -t nat -nvL

[root@asterisk1 root]# iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 2 packets, 837 bytes)
pkts bytes target prot opt in out source destination

Chain POSTROUTING (policy ACCEPT 3 packets, 852 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 3 packets, 852 bytes)
pkts bytes target prot opt in out source destination
[root@asterisk1 root]#

Originally Posted by jperry22

[root@asterisk1 root]# iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 2 packets, 837 bytes)
pkts bytes target prot opt in out source destination

Chain POSTROUTING (policy ACCEPT 3 packets, 852 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 3 packets, 852 bytes)
pkts bytes target prot opt in out source destination
[root@asterisk1 root]#

Sorry for not being clear on this. Enable telnet on the WRT54g and telnet into the WRT54g's IP. Run this command.

[jperry22]

Sorry! I thought you meant the * box. I already have SSH enabled on the WRT. Here's the results: .18 is my mail/web server and .15 is the * box

~ # iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 4955 packets, 715K bytes)
pkts bytes target prot opt in out source destination
284 11504 DNAT icmp -- * * 0.0.0.0/0 24.167.78.47 to:10.253.253.251
325 16004 DNAT tcp -- * * 0.0.0.0/0 24.167.78.47 tcp dpt:80 to:10.253.253.18
0 0 DNAT udp -- * * 0.0.0.0/0 24.167.78.47 udp dpt:80 to:10.253.253.18
0 0 DNAT tcp -- * * 0.0.0.0/0 24.167.78.47 tcp dpt:443 to:10.253.253.18
0 0 DNAT udp -- * * 0.0.0.0/0 24.167.78.47 udp dpt:443 to:10.253.253.18
360 19424 DNAT tcp -- * * 0.0.0.0/0 24.167.78.47 tcp dpt:25 to:10.253.253.18
0 0 DNAT udp -- * * 0.0.0.0/0 24.167.78.47 udp dpt:25 to:10.253.253.18
0 0 DNAT tcp -- * * 0.0.0.0/0 24.167.78.47 tcp dpt:81 to:10.253.253.15
0 0 DNAT udp -- * * 0.0.0.0/0 24.167.78.47 udp dpt:81 to:10.253.253.15
0 0 DNAT tcp -- * * 0.0.0.0/0 24.167.78.47 tcp dpt:5060 to:10.253.253.15
15 7605 DNAT udp -- * * 0.0.0.0/0 24.167.78.47 udp dpt:5060 to:10.253.253.15
66 2656 DNAT tcp -- * * 0.0.0.0/0 24.167.78.47 tcp dpts:10000:20000 to:10.253.253.15
0 0 DNAT udp -- * * 0.0.0.0/0 24.167.78.47 udp dpts:10000:20000 to:10.253.253.15
75 3600 DNAT tcp -- * * 0.0.0.0/0 24.167.78.47 tcp dpt:22 to:10.253.253.15
0 0 DNAT udp -- * * 0.0.0.0/0 24.167.78.47 udp dpt:22 to:10.253.253.15

Chain POSTROUTING (policy ACCEPT 1031 packets, 87757 bytes)
pkts bytes target prot opt in out source destination
3030 210K MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0
389 51096 RETURN all -- * br0 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast
342 21296 MASQUERADE all -- * br0 10.253.253.0/24 10.253.253.0/24

Chain OUTPUT (policy ACCEPT 60 packets, 8053 bytes)
pkts bytes target prot opt in out source destination

[jperry22]

For those of you that saw I had a couple of test ports open, (81 and 22) they are closed now. ops: I was using them to work on the system remotely but I'm home now.

Originally Posted by jperry22

Sorry! I thought you meant the * box. I already have SSH enabled on the WRT. Here's the results: .18 is my mail/web server and .15 is the * box

I don't think it's the router.... hmmm.

[PhoneBoy]

I'd be running tcpdump from the Asterisk server. Something like:

tcpdump -ni eth0 -s 1500 -X host fwd.pulver.com

I'd look at the SIP registrations and see what it might think the IP address is.

[jperry22]

Originally Posted by PhoneBoy

I'd be running tcpdump from the Asterisk server. Something like:

tcpdump -ni eth0 -s 1500 -X host fwd.pulver.com

I'd look at the SIP registrations and see what it might think the IP address is.

I've attached a file containing the output from tcpdump.