can't register sip client from external address

[deicist]

Hi, hope someone can help with this. Basically I'm trying to get a sip client to register from outside my local network. I had this working, briefly, yesterday... but obviously something has changed now because it's not working anymore.

I have this in my 'sip_general_custom.conf':

externip=80.177.49.XX 
localnet=192.168.250.0/255.255.255.0
nat=yes
outboundproxy=192.168.250.1

I have UDP 5060, 10000->20000 forwarded to PIAF box

firewall logs show lots of entries along the lines of:

clientIP random_port -> PIAF 5060 ALLOWED

if I do

tail -n100 -f /var/log/asterisk/full

whilst trying to register I get nothing relating to this registration though, no 'registration failed' or anything, as if the client isn't even reaching the box.

the client reports 'timeout'.

Any clues how to start diagnosing this?

Cheers.

 

[deicist]

Okay, this is very strange:

If I remove the extension I'm trying to register against I see this in the 'full' log:

[Nov 18 14:56:37] NOTICE[3082] chan_sip.c: Registration from '<sip:112@MY_EXTERNAL_IP>' failed for 'CLIENTS_IP - No matching peer found

which is what I expect. But when the extension is there, I don't see anything in the log and the client just times out.

Confusing.

edit: this is the output of the 'status' command btw.

            PBX in a Flash Version 1.4 Daemon Status                
********************************************************************
* Asterisk  * ONLINE  * Zaptel    * ONLINE  * MySQL      * ONLINE  *
* SSH       * ONLINE  * Apache    * ONLINE  * Iptables   * ONLINE  *
* Fail2ban  * OFFLINE * IP Connect* ONLINE  * Ip6tables  * ONLINE  *
* BlueTooth * ONLINE  * Hidd      * ONLINE  * NTPD       * ONLINE  *
* Sendmail  * ONLINE  * Samba     * OFFLINE * Webmin     * ONLINE  *
* Ethernet0 * ONLINE  * Ethernet1 *   N/A   * Wlan0      *   N/A   *
********************************************************************
* Running Asterisk Version : Asterisk 1.4.21.2
* Asterisk Source Version  : 1.4.21.2
* Zaptel Source Version    : 1.4.12.1
* Libpri Source Version    : 1.4.9
* Addons Source Version    : 1.4.7
********************************************************************
pbx.local on 192.168.250.2 - eth0
CentOS release 5.2 (Final) :32 Bit Kernel: 2.6.18-92.1.22.el5

 

[deicist]

sorry to keep replaying to my own posts, I know it's bad form but every time I discover something new about this issue I hope someone will peek in and help out.

Anyway, to rule out firewall issues I moved the PBX to another network connection and put it on the DMZ.

I now have eth0 on the PBX going to my main router / internal LAN

eth1 goes directly out to t'internet via a linksys router, PBX is on the DMZ on this router

externip is set to the external IP of the linksys router.

both LANs (the one the linksys is on, and the main LAN) are in localnet definitions

no change.

 

[completetech]

is it just the one phone? and what type of phone?
can that same person register a softphone to your network?

can someone else register a softphone to your network? say setup a dummy extension for them to try real quick.