PBiaf-New Install(er)

[golfer01]

This is my first shot at installing and it's been a bit frustrating. I have basic level knowledge of linux. So far, after wrestling with instructions that point you to files pbiaf says not to mod and a few choice words, I was able to get it to work on my local network with Xlite

Then, I got cocky and decided to try it on my DMZ, not... I'm really trying to get it to work behind IPCop on the DMZ. When I do netconfig and use 192.168.3.25 and restart, then the PBX acts as if it's isolated, can't ping it's supposed gateway interface at 192.168.3.1 or the outside interface at 71.xxx.xxx.xxx and IP Connect shows offline when on the 192.168.3.x subnet

I'm a bit confused about the mod to sip_custom.conf about when to use it or not (externip=180.12.12.12
localnet=192.168.1.0/255.255.255.0 (NOTE: The first 3 octets need to match your private IP addresses!)
Is this to be used on a DMZ at all? Or, changed to the 192.168.(3).0 subnet when placed there. And, since I'm behind a good firewall can I turn PBIAF's firewall off then open ports?

 

[jroper]

Hi

You do need to put these lines in. It may help if I explain.

When you register with a SIP provider, you have to tell the provider what IP address you are on so they can send calls to you, and send you the audio.

Some firewalls are SIP aware, so when a SIP packet goes out to your carrier, the packet is re-written with your external IP address, rather than say 192.168.1.200 which is the IP address of your carrier.

However, this is currently the exception rather than the rule, so without modification, the Asterisk server will tell the remote SIP server that "If you want me, then I'm on address 192.168.1.200" Naturally, the remote SIP server has not got a clue where to find that IP, so things do not work.

Additionally in your internal network, your phones want to know that your IP address IS 192.168.1.200.

So the addition of your external IP address, and the localnet tells external servers what your external IP address is, so they know how to send stuff back to you, and ensures that your local phones know where to find you too.

In respect of the IPtables, I'd leave them, they should not be getting in the way.

Joe

 

[golfer01]

Thank you jroper, to clarify, I have a DMZ subnet from IPCop at 192.168.3.x on the Orange interface and 192.168.1.x on the Green. Orange is where I have my web and mail servers with the appropriate ports fowarded and Green is my internal DHCP'd PC's.

I used netconfig to assign the PBX with a 192.168.3.25 address but it seems like it has no idea about gateways. So, in this case should I set sip_custom.conf to

externip=sipxxx.redirectme.net
localnet=192.168.3.0/255.255.255.0