Re: Damn it, ipcop appears dead to me

On Wednesday, November 02, 2016 04:11:57 PM Ranbir wrote:

> 
> > The only thing that concerns me is whether BSD and PFtables can handle
> > sip
> > NAT tracking as well as Linux and the now enabled by default in IPCop
> > module, nf_conntrack_sip which can have parameters added to provide
> > unfettered sip performance with no one way audio or incoming calls not
> > reaching you yet still full NAT protection. Forwarding sip ports as
> > others
> > suggest to alleviate this is the wrong way to handle this.
> 
> Oooo...how do I do that? Would you mind sharing?
> 
> I'm using a voip service which works fine right now. But, I had some
> pretty infuriating registration issues a month ago that made no sense. I
> didn't change anything on my side: the voip service just stopped
> working. I could only get it to work if the DSL modem was turned back
> into a router and the ATA was plugged directly into or if the ATA dialed
> the PPPoE connection and not the IPCop system. Then, somehow, it started
> working again and I'm not entirely sure why.

You edit in modprobe options to /etc/modprobe.d/local.conf and there are quite 
a few options, you may add up to 8 sip ports plus change the amount of time 
the firewall will keep your connections alive. By default connections only 
remain open for 180 seconds and the sip connections are not aware of any rtp 
traffic related. I had a VOIP provider that only sent a keep alive every 500 
seconds and it would lose registration. Since I have several providers and use 
more than one local sip port, my local.conf file has this in it:

#List of up to 8 port numbers for module nf_conntrack_sip (comma-separated) 
eg. 5060,5070,5080
options nf_conntrack_sip ports=5100,5110,5060,5070,5080,5090 sip_timeout=650

You can see that the connections remain open from inside the firewall of 
course, for as long as you set it for. There are more options if you have an 
ITSP (Voip Provider) that does not proxy RTP also known as direct media, not 
proxied media. 

Read about halfway down this page: 
https://freeswitch.org/confluence/display/FREESWITCH/Firewall

Dave Studeman

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user