Trouble with PIAF GV Server and Remote Extensions

[chinesestunna]

Hi all,

I have searched up and down the internet and have exhausted everything I can think of that is wrong.

I have the following setup:

[Hardware]
Router: Asus RT-N16 running DD-WRT
Server: Standard VMWare RedHat 5 VM running PIAF Purple

[Status Output]
I have noticed something here. This is the log from a successful LAN XLite connection (I closed it first then reopenned):

-- Unregistered SIP '701'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'inbound1.vitelity.net'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'
-- Registered SIP '701' at 192.168.0.99:47528
> Saved useragent "X-Lite release 1104o stamp 56125" for peer 701
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'inbound1.vitelity.net'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'

When I try to connect remotely using the office network or Verizon 3G, nothing happens with the logs so it would seem the connection attempt never made it to the server. I have triple checked all ports mentioned in the guides such as 5060 and 10000-20000 have been forwarded to the PIAF server. In fact I've even put the PIAF into the DMZ but to no avail.

I did hypothesis that Comcast might be blocking 5060 and have read something about that and Vonage issues in the past so I have tried to forward something random like External port 15223 to 5060 on the PIAF server and switched the ports on my SipDroid client. This also did not work.

All SIP clients including SipDroid, XLite softphones and PAP2, work while on my LAN, wired or wireless.
What I'm trying to do is drop the PAP2 at my parents house so they get GV service.
They have the same setup:
Comcast Cable -> DD-WRT router (nothing special blocked)

The issue that I'm having is that I can't get any of the above devices to connect to my server while at their house, the error is registration timeout. I have the ports 5060&10000-20000 on my router forwarded to the Asterisk server so in theory everything should be fine. I have DDNS setup at my house so I've used both the externhost and externip settings on the Asterisk server but neither would work. I have also tried a different registration port other than 5060 but no dice.

I have followed this guide:
freepbx.org/support/documentation/howtos/howto-setup-a-remote-sip-extension
and read a few other guides along the same lines but still couldn't get it working.

Any thoughts PIAF Gurus would be great appreciated!

 

[rossiv]

Welcome to the forums!
Please read this post first and post all information that it requests. It helps us help you.
Could you also provide some logs from asterisk -vvvvvr when you attempt to register. It is possible that the phone makes it to the PIAF server, but Asterisk is denying its attempts.

Good Luck and Welcome!
Ross

 

[RTOMikey]

I can't speak for Comcast, but after a lot of digging, found out that here in Pa, Service Electric Cable blocks all VOIP Traffic but their own. My server sits on a public IP and anyone can connect if they are using a local phone service ISP, but the cable company customers are not able to connect to anything but Service Electrics servers. Perhaps a way to force you to buy telephone through them???

 

[chinesestunna]

Welcome to the forums!
Please read this post first and post all information that it requests. It helps us help you.
Could you also provide some logs from asterisk -vvvvvr when you attempt to register. It is possible that the phone makes it to the PIAF server, but Asterisk is denying its attempts.

Good Luck and Welcome!
Ross

Ross - thanks for the info I'm usually much better at posting for help than this. Here's the info:

[Hardware]
Router: Asus RT-N16 running DD-WRT
Server: Standard VMWare RedHat 5 VM running PIAF Purple

[Status Output]
Thanks for the vvvvvr suggestion, I have noticed something here. This is the log from a successful LAN XLite connection (I closed it first then reopenned):

-- Unregistered SIP '701'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'inbound1.vitelity.net'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'
-- Registered SIP '701' at 192.168.0.99:47528
> Saved useragent "X-Lite release 1104o stamp 56125" for peer 701
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'inbound1.vitelity.net'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'
> doing dnsmgr_lookup for 'sipgate.com'

When I try to connect remotely using the office network or Verizon 3G, nothing happens with the logs so it would seem the connection attempt never made it to the server. I have triple checked all ports mentioned in the guides such as 5060 and 10000-20000 have been forwarded to the PIAF server. In fact I've even put the PIAF into the DMZ but to no avail.

I did hypothesis that Comcast might be blocking 5060 and have read something about that and Vonage issues in the past so I have tried to forward something random like External port 15223 to 5060 on the PIAF server and switched the ports on my SipDroid client. This also did not work.

 

[chinesestunna]

I can't speak for Comcast, but after a lot of digging, found out that here in Pa, Service Electric Cable blocks all VOIP Traffic but their own. My server sits on a public IP and anyone can connect if they are using a local phone service ISP, but the cable company customers are not able to connect to anything but Service Electrics servers. Perhaps a way to force you to buy telephone through them???

I'm starting to have strong suspicions of this but so far have unable to find conclusive evidence on my various Google Searches that Comcast is doing something rotten. Especially considering they have something like 25% of the US cable users are on Comcast and I'm sure I'm not the only one trying to run a PIAF GV server lol

 

[chinesestunna]

added trace logs to the main thread, please help guys! I'm going crazy trying to get this stuff to work

 

[rossiv]

I haven't used DD-WRT in a while, but does it provide any logs as for connections to forwarded ports? Do you have anything in the Permit/Deny fields for each extension in FreePBX? Are you using the PIAF Whitelist?

Ross

 

[jeffmac]

Did I miss it, or has there been no mention of iptables in this thread? You probably need to disable iptables (the command is disable-iptables) and try again. If it works then you'll need to update some iptables rules to allow access from outside your local lan.

Jeff

 

[mpreissner]

you probably need to check your iptables configuration and allow traffic from whatever address your parents router has. technically, your router is forwarding the traffic to your PBX, but the software firewall on the PBX is dropping the packets before it hits the asterisk services.