Please help - Firewall issue or Astrix Config?

[jolpot]

First post Please be nice.

I have searched for quite some time and finally decided to post here - some issues posted seem similar to mine not quite.

All I want is to place a call from work to my astrix server at home and record audio.

I am using TrixBox 1.1.1 on my home laptop. Laptop is behind a Westell DSL modem + linksys router. Modem does DHCP and I have enabled port forwarding to the asterisk server(all SIP and RTP)

If I make a call from an internal softphone to the Trixbox, I hear audio and able to record my voice too.

If I make a call from external softphone(from work) to home, I see that asterisk receives the INVITE and responds with a 200OK...BUT, the internal IP addresses are sent instead of the external-ip. As a result, the call doesnt complete.(the Contact Header and SDP contains internal IP address, the work softphone sends the ACK to internal IP address found in the Contact Header which is simply dropped, presumably, by the router at work).

Should I change something on my firewall OR change asterisk configuration files???

Can you please help me.
Thanks

[rizsher]

There are many sites that detail Trixbox setup.. Nerd Vittles is great. Also try this site, its details of my own setup and may work for you too.

Generally, you have to make sure your modem passes the public IP address to the downstream router, i.e the WAN port of the router should have a public IP address, not an internal address like 192.168.x.x or 10.x.x.x. You have to forward the requisite ports (10000-20000, 4569-4569)..

Have a look at the sites and see if they help.

[jolpot]

Thanks rizsher, I am planning to get a SPA3102 and your instructions will be very helpful.

I have started off from nerdvittles and am leaning towards the fact that it has nothing to do with trixbox but the modem itself.

When you say "port forwarding", does it mean WAN=>LAN and viceversa?

I did see the INVITE come in, however, the response did not have its IPaddresses changed by the firewall...I checked on my modem settings and cdnt find an explicit setting to what you specified. Could you elaborate a little please?
Thanks,

[rizsher]

Don't really understand wot u mean by WAN-LAN or Vice Versa...there will be a section called "Port Range Forwarding", or somethign similar in your router setup, there you need to forward ports 10000-20000 and 4569-4569 and 5000-5065 to the internal IP address of your Trixbox server... in addtion, I hope you have already made the changes to sip.conf as well.

[jolpot]

Thanks rizsher,

WAN - external world (WWW)
LAN - is my internal ip address for asterisk.

The modem is running DHCP server giving me an ipaddress(which you already mentioned).

I have made the changes in sip.conf and will write back how it went.

externip = my-home-external-ip
localnet=astrix-ip/255.255.255.0
nat=yes


Thanks again for your help

[rizsher]

I do know wot WAN/LAN Stands for... I didn't really understnad what you meant in the context of port forwarding.

Two points:

If your ISP provides you with a Static IP, then your sip.conf entries are OK, else it needs to have an an externrefresh line to update the IP Address.

The Localnet line is NOT your AsteriskIP/255.255.255.0, but the default gateway... 192.168.1.1


[general]

port = 5060 ; Port to bind to (SIP is 5060)
bindaddr = 0.0.0.0 ; Address to bind to (all addresses on machine)
externhost = my.dyndns.domain
externrefresh = 5
localnet=192.168.1.1/255.255.255.0
nat=yes
defaultexpirey=3600

[jolpot]

Thank you very much - I was able to make the call from my home to work and get the call through and record and leave a message.

I used the settings from your last suggestion and everything worked perfectly well.