I am seeing the following in the logs, and currently cannot make any outbound calls on my setup. Any ideas?
[2017-11-09 17:00:41] WARNING[21522][C-00000008] channel.c: No channel type registered for ‘SIP’
[2017-11-09 17:00:41] WARNING[21522][C-00000008] app_dial.c: Unable to create channel of type ‘SIP’ (cause 66 - Channel not implemented)
[2017-11-09 17:00:41] VERBOSE[21522][C-00000008] app_dial.c: Everyone is busy/congested at this time (1:0/0/1)
[2017-11-09 17:00:41] VERBOSE[21522][C-00000008] pbx.c: Executing [s@macro-dialout-trunk:32] NoOp(“PJSIP/100-00000008”, “Dial failed for some reason with DIALSTATUS = CHANUNAVAIL and HANGUPCAUSE = 66”) in new stack
I rebooted the box, and dont see those errors now, but now i see 2 other things, and just have dead air after dialing instead of saying all circuits busy
[2017-11-09 19:00:06] WARNING[2798] chan_sip.c: Retransmission timeout reached on transmission @sip.flowroute.com for seqno 102 (Critical Request) – See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 31999ms with no response
and
[2017-11-09 19:07:31] NOTICE[2798] chan_sip.c: – Registration for ‘@sip.flowroute.com’ timed out, trying again (Attempt #28)
Hmmmm…from both the error messages above, you are definitely not having good luck with passing SIP through the PFSense - I haven’t messed with them in YEARS but I seem to remember that it had a SIP ALG (Application Layer Gateway) that tried to “Help” and like most ALG’s it only screwed it up - for testing purposes, if you are on defaults you need to pass SIP (Either UDP Port 5060 or 5160 - Look in Settings -> Asterisk SIP Settings under Chan SIP Settings and confirm what port it is using - new installs default to 5160) and RTP (Default is UDP 10000-19999 if you haven’t changed anything) to the box from the outside and then see where you are.
Also, a gotcha with new installs - Check under Admin -> System Admin -> Intrusion Detection and make sure you haven’t blocked your provider - it can happen with misconfiguration and then you are chasing your tail because no matter what you do, it will never work because they are blocked!
I have the ports forwarded and allowed through the firewall, I have static outbound Nat set for the ports, and no ups are banned in freepbx, I opened a ticket with flowroute to ensure they didn’t block my public ip for too many attempts.
Flowroute is harder to setup than some of the other providers as they don’t proxy RTP traffic.
As I asked in that other thread, do you limit outbound communications with your firewall?
I do (with my pfSense firewall) and had this into account…
I am not sure which one of my providers proxy or don’t proxy RTP traffic now but Flowroute is the first one I encountered which forced me to globally permit RTP traffic…
Traffic to SIP ports has an ACL that lists all of my ITSPs servers, RTP traffic has no ACL at all…
Now your problem is not with RTP traffic but SIP but the RTP issue with Flowroute is something to keep in mind.
pfSense works wonderfully for me with SIP but I have a separate IP for my PBX. Is your FreePBX system on the same network as the LAN and sharing its IP or did you put in in a different subnet with different firewall rules (ie a real DMZ, not a consumer router defition of one).
How are you setted up?
Have you looked at pfSense firewall logs to see if it is actually the pfSense firewall blocking the SIP traffic?
I have mine nated with a single public ip for all internet traffic, and it is not on its own network/dmz. I will see if there is anything in the firewall logs
I saw that snort had an ip for flowroute blocked, unblocked and cleared states and still not working. Testing by looking through firewall and freepbx logs while making a call to see if issue is different now
Ok I think I found it, I keep seeing after a couple successful calls, in the firewall a rule called “block snort2c hosts” is blocking my sip ports. I’m not sure where this is or how to disable it
I think i fixed it, i didnt realize there was a dropdown for the WAN rules in snort, i went to the preprocessor rules and disabled the SIP maximum dialogs rule, and seems to be working now. But im still having issues with inbound, so i will try to work through this and see if i can also correct that.
Haha i just realized how many updates i have, calls are working, but some have audio and some do not. I have ports 10000-20000 forwarded to my PBX, and have them set as static ports on Nat. Any ideas?