SIP issue 4

[teletechman]

I have a IPO that has been working but the ITdept decided to change firewalls to a Sophos firewall. I now am having issues with no audio even thou we have checked the ports and routing. I see when the IPO tries to connect that it is sending its private address not the public address. Everything I have tried does not change this. I have done the following.
SIP trunk transport set to LAN1
LAN 1 network topology set to static port block
public IP address is set to correct IP
public port set to 5060
Stun set to 0.0.0.0
binding refresh set to 60 seconds.
This is what I see when it sends [highlight #FCE94F]11:45:49 487353mS SIP Tx: UDP 10.10.20.1:5060 -> 192.58.90.20:5060[/highlight]
Any help would be great.
Mike

 

[kwing112000]

Its probably the SIP alg on the firewall. You may need to either turn it off or turn it on and test.

Kevin Wing
ACSS Small and Medium Enterprise (SME) Communications
ACS- Implement IP Office
ACA- Implement IP Office
Vive Communications

 

[Westi]

it also depends if the provider fixes the issue automatically as the packages have the public IP in it as origination even though the SIP header may not.

You can try changing from static port block to one of the other settings like restricted cone NAT or port restricted cone NAT and test.

It also may play a role if you have a registration trunk or a peer to peer

Joe
FHandw, ACSS, ACIS

"Dew knot truss yore Spell Cheque

 

[jhall123]

If you need to disable SIP ALG on the sophos you have to do it from the command line. See here:

https://docs.sophos.com/nsg/sophos-...rewallRules/VoIPSIPModuleTurnOnOff/index.html

 

[TouchToneTommy]

Quick test for SIP ALG - download and run the sip-alg-detector.exe from

https://support.ringlogix.com/index.php?/Knowledgebase/Article/View/167/38/sip-alg-detector

 

[Westi]

Nice one TTT

Joe
FHandw, ACSS, ACIS

"Dew knot truss yore Spell Cheque

 

[pccsipoffice]

Your ports look typical but remove any type of SOURCE PORT remapping. These settings can be represented with different setting names for different firewalls or routers.

http://WWW.MC-COMMUNICATIONS.NET