Freepbx over l2tp: can ping and register phones but cannot reach services(ssh,web gui)

wassy83 · September 15, 2019, 9:08am

Hi to all,
I have a freepbx box over a mikrotik ipsec/l2tp VPN.
pbx is 192.168.25.200
my side is 192.168.25.0/24 through l2tp ip 10.0.25.1
remote side is 192.168.26.0/24 through l2tp ip 10.0.25.2
I can ping from remote side the pbx and all phones are correctly registered with no issues, but I cannot access from remote side any services like ssh or web gui. I tried to disable any possible firewall rules on both mikrotik and freepbx side without success, I also tried to add into freepbx firewall any public or local related ip, but still cannot access, but as I said things are working

I’m thinking that maybe this is related on some returning route but I think is impossibile cause freepbx is the only service that I cannot reach from the remote side, any other ssh server will work and furthermore ping is returning back!

The strange think is that if I tried to connect over openvpn to my side mikrotik I can easly reach the pbx webui.

I tried a tcp dump command like this to see what happens on my freepbx

tcpdump port 80 and ‘(tcp-syn|tcp-ack)!=0’

and I cleraly see this traffic on my freepbx when trying to connect to web gui from remote side

10:49:48.471536 IP 192.168.26.131.59248 > freepbx.sangoma.local.http: Flags [S], seq 3877414963, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:48.471612 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:48.471627 IP 192.168.26.131.59249 > freepbx.sangoma.local.http: Flags [S], seq 8771055, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:48.471637 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:48.722735 IP 192.168.26.131.59250 > freepbx.sangoma.local.http: Flags [S], seq 478317604, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:48.722761 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:49.571546 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:49.771546 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:49.771563 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:51.471685 IP 192.168.26.131.59248 > freepbx.sangoma.local.http: Flags [S], seq 3877414963, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:51.471738 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:51.471766 IP 192.168.26.131.59249 > freepbx.sangoma.local.http: Flags [S], seq 8771055, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:51.471782 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:51.722491 IP 192.168.26.131.59250 > freepbx.sangoma.local.http: Flags [S], seq 478317604, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:51.722540 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:53.571536 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:53.771545 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:53.771577 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:57.471386 IP 192.168.26.131.59248 > freepbx.sangoma.local.http: Flags [S], seq 3877414963, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:57.471458 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:57.472498 IP 192.168.26.131.59249 > freepbx.sangoma.local.http: Flags [S], seq 8771055, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:57.472515 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:49:57.723069 IP 192.168.26.131.59250 > freepbx.sangoma.local.http: Flags [S], seq 478317604, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:49:57.723104 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:01.571537 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:01.771530 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:01.771561 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:09.571525 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:09.720075 IP 192.168.26.131.59252 > freepbx.sangoma.local.http: Flags [S], seq 422826850, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:09.720144 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:09.771536 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:09.840517 IP 192.168.26.131.59253 > freepbx.sangoma.local.http: Flags [S], seq 4129128216, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:09.840544 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:09.971549 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:10.771583 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:10.971537 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:12.720818 IP 192.168.26.131.59252 > freepbx.sangoma.local.http: Flags [S], seq 422826850, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:12.720892 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:12.840522 IP 192.168.26.131.59253 > freepbx.sangoma.local.http: Flags [S], seq 4129128216, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:12.840547 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:14.771555 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:14.971541 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:18.721456 IP 192.168.26.131.59252 > freepbx.sangoma.local.http: Flags [S], seq 422826850, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:18.721551 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:18.840164 IP 192.168.26.131.59253 > freepbx.sangoma.local.http: Flags [S], seq 4129128216, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:18.840195 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:22.772556 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:23.172543 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:25.572549 IP freepbx.sangoma.local.http > 192.168.26.131.59249: Flags [S.], seq 1362958868, ack 8771056, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:25.972536 IP freepbx.sangoma.local.http > 192.168.26.131.59250: Flags [S.], seq 4252251233, ack 478317605, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:25.972551 IP freepbx.sangoma.local.http > 192.168.26.131.59248: Flags [S.], seq 109440904, ack 3877414964, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:30.772553 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:31.172592 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:35.744756 IP 192.168.26.131.59255 > freepbx.sangoma.local.http: Flags [S], seq 3939391748, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:35.744846 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:35.745396 IP 192.168.26.131.59256 > freepbx.sangoma.local.http: Flags [S], seq 1099449442, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:35.745417 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:35.994955 IP 192.168.26.131.59257 > freepbx.sangoma.local.http: Flags [S], seq 2434359832, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:35.995029 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:36.972573 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:36.972605 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:37.372564 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:38.744536 IP 192.168.26.131.59255 > freepbx.sangoma.local.http: Flags [S], seq 3939391748, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:38.744608 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:38.745168 IP 192.168.26.131.59256 > freepbx.sangoma.local.http: Flags [S], seq 1099449442, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:38.745183 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:38.997023 IP 192.168.26.131.59257 > freepbx.sangoma.local.http: Flags [S], seq 2434359832, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:38.997053 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:40.972548 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:41.172554 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:41.372527 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:44.745424 IP 192.168.26.131.59255 > freepbx.sangoma.local.http: Flags [S], seq 3939391748, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:44.745485 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:44.745513 IP 192.168.26.131.59256 > freepbx.sangoma.local.http: Flags [S], seq 1099449442, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:44.745521 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:44.997053 IP 192.168.26.131.59257 > freepbx.sangoma.local.http: Flags [S], seq 2434359832, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:50:44.997110 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:46.972563 IP freepbx.sangoma.local.http > 192.168.26.131.59252: Flags [S.], seq 1588306684, ack 422826851, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:47.172528 IP freepbx.sangoma.local.http > 192.168.26.131.59253: Flags [S.], seq 1751636961, ack 4129128217, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:48.972560 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:49.172561 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:49.572553 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:57.172547 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:57.172573 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:50:57.572533 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:13.172557 IP freepbx.sangoma.local.http > 192.168.26.131.59255: Flags [S.], seq 1432836671, ack 3939391749, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:13.172575 IP freepbx.sangoma.local.http > 192.168.26.131.59256: Flags [S.], seq 1270498086, ack 1099449443, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:13.572548 IP freepbx.sangoma.local.http > 192.168.26.131.59257: Flags [S.], seq 3319616153, ack 2434359833, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:26.761336 IP 192.168.26.131.59261 > freepbx.sangoma.local.http: Flags [S], seq 1435327049, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:26.761432 IP freepbx.sangoma.local.http > 192.168.26.131.59261: Flags [S.], seq 4024768948, ack 1435327050, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:26.761445 IP 192.168.26.131.59262 > freepbx.sangoma.local.http: Flags [S], seq 3416228626, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:26.761455 IP freepbx.sangoma.local.http > 192.168.26.131.59262: Flags [S.], seq 622931806, ack 3416228627, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:27.011849 IP 192.168.26.131.59263 > freepbx.sangoma.local.http: Flags [S], seq 3681864362, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:27.011875 IP freepbx.sangoma.local.http > 192.168.26.131.59263: Flags [S.], seq 2416441355, ack 3681864363, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:27.972558 IP freepbx.sangoma.local.http > 192.168.26.131.59262: Flags [S.], seq 622931806, ack 3416228627, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:28.172554 IP freepbx.sangoma.local.http > 192.168.26.131.59261: Flags [S.], seq 4024768948, ack 1435327050, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:28.372531 IP freepbx.sangoma.local.http > 192.168.26.131.59263: Flags [S.], seq 2416441355, ack 3681864363, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:29.761439 IP 192.168.26.131.59261 > freepbx.sangoma.local.http: Flags [S], seq 1435327049, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:29.761464 IP freepbx.sangoma.local.http > 192.168.26.131.59261: Flags [S.], seq 4024768948, ack 1435327050, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:29.765103 IP 192.168.26.131.59262 > freepbx.sangoma.local.http: Flags [S], seq 3416228626, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:29.765127 IP freepbx.sangoma.local.http > 192.168.26.131.59262: Flags [S.], seq 622931806, ack 3416228627, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:30.013382 IP 192.168.26.131.59263 > freepbx.sangoma.local.http: Flags [S], seq 3681864362, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:30.013412 IP freepbx.sangoma.local.http > 192.168.26.131.59263: Flags [S.], seq 2416441355, ack 3681864363, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:31.972545 IP freepbx.sangoma.local.http > 192.168.26.131.59262: Flags [S.], seq 622931806, ack 3416228627, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:32.172535 IP freepbx.sangoma.local.http > 192.168.26.131.59261: Flags [S.], seq 4024768948, ack 1435327050, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:32.372491 IP freepbx.sangoma.local.http > 192.168.26.131.59263: Flags [S.], seq 2416441355, ack 3681864363, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:35.761006 IP 192.168.26.131.59261 > freepbx.sangoma.local.http: Flags [S], seq 1435327049, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:35.761044 IP freepbx.sangoma.local.http > 192.168.26.131.59261: Flags [S.], seq 4024768948, ack 1435327050, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:35.765687 IP 192.168.26.131.59262 > freepbx.sangoma.local.http: Flags [S], seq 3416228626, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:35.765711 IP freepbx.sangoma.local.http > 192.168.26.131.59262: Flags [S.], seq 622931806, ack 3416228627, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:36.013497 IP 192.168.26.131.59263 > freepbx.sangoma.local.http: Flags [S], seq 3681864362, win 64240, options [mss 1410,nop,wscale 8,nop,nop,sackOK], length 0
10:51:36.013522 IP freepbx.sangoma.local.http > 192.168.26.131.59263: Flags [S.], seq 2416441355, ack 3681864363, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:39.973536 IP freepbx.sangoma.local.http > 192.168.26.131.59262: Flags [S.], seq 622931806, ack 3416228627, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:40.173544 IP freepbx.sangoma.local.http > 192.168.26.131.59261: Flags [S.], seq 4024768948, ack 1435327050, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:40.573510 IP freepbx.sangoma.local.http > 192.168.26.131.59263: Flags [S.], seq 2416441355, ack 3681864363, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:47.973529 IP freepbx.sangoma.local.http > 192.168.26.131.59262: Flags [S.], seq 622931806, ack 3416228627, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:48.173535 IP freepbx.sangoma.local.http > 192.168.26.131.59261: Flags [S.], seq 4024768948, ack 1435327050, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:51:48.573526 IP freepbx.sangoma.local.http > 192.168.26.131.59263: Flags [S.], seq 2416441355, ack 3681864363, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:52:00.389388 IP 192.168.25.79.13512 > freepbx.sangoma.local.http: Flags [S], seq 1991768228, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
10:52:00.389427 IP freepbx.sangoma.local.http > 192.168.25.79.13512: Flags [S.], seq 3945284748, ack 1991768229, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
10:52:00.389440 IP 192.168.25.79.13513 > freepbx.sangoma.local.http: Flags [S], seq 3612611044, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
10:52:00.389455 IP freepbx.sangoma.local.http > 192.168.25.79.13513: Flags [S.], seq 2205060571, ack 3612611045, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0

any suggestions?
many thanks

BlazeStudios · September 15, 2019, 9:38pm

And how are the phones connecting to the VPN? Is there a router in front of them handling the connection?

wassy83 · September 15, 2019, 10:06pm

yes from my side I have a mikrotik ccr that is my ipsec/l2tp server and on the remote side I have a smaller mikrotik hEx that is an l2tp client. on the remote side the phones are connected to the mikrotik through the lan interface, and as I said they can call outbound, inbound no one way audio or nat problems, I can ping from remote side the pbx but I cannot reach services. I’m thinking now about an mtu problem or something similar

wassy83 · September 15, 2019, 10:09pm

but is strange cause I can do anything with a web server behind the same fpbx’s firewall and same gateway. If the tcp dump returns me traffic and I can ping the box(so this mean that there aren’t return routing problems) the problem must be on freepbx box.

arielgrin · September 15, 2019, 11:50pm

Does your FreePBX server have more than one nic?

wassy83 · September 16, 2019, 12:20am

No It gas only One nic in same subnet as the l2tp server

arielgrin · September 16, 2019, 2:22am

Are you running the firewall module?

system · September 23, 2019, 2:22am

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.