For kicks, I have a complete how-to for pfsense. http://blog.myitdepartment.net/?p=37
<http://blog.myitdepartment.net/?p=37>You might want to look it over and compare your config for rules/nat. In eyebeam/xlite you should have discover global address, discover server, ice unchecked. The domain for softphone should be "mydomain.net" (not sipx.mydomain.net) and you should be registering with domain to receive inbound calls outbound should be sent via domain. On Thu, Nov 19, 2009 at 11:07 PM, Jordan Turner <jordan.turner1...@yahoo.com > wrote: > NOTE: ASCii drawing attached. > > 1. I'm traversing the FW where sipX using pfSense 1.2.2. On sipX, I have > the Outbound NAT set manual - using static port mapping stated here - > http://doc.pfsense.org/index.php/Static_Port - for my rules on the FW, I > have UDP 5060, 5080, 30000-31000 open on WAN and LAN > > 2. My DNS internally and externally came out fine. I followed the > instructions by Michael Pilcher's book, and on his blog. Interally, it is > AD integrated and externally, it is DynDNS. > > 3. Not exactly sure here (of what to use), but the setting I have has > Domain at mydomain.net, Domain Proxy registering via proxy address > sipx.mydomain.com (I am using sipx as a hostname in public and private > DNS). On Firewall Transversal setting on eyeBeam I have Discover global > address, STUN Server has Discover server, and Enable ICE checked on or > enabled. > > > > > You need to detail 3 things: > > 1. How are you traversing NAT where sipx is? Your firewall is very > important when using an ITSP, and needs to be able to handle symettric NAT. > > "Most firewalls randomize ports (rewrite the source port) of outbound > traffic. This is problematic for some protocols (like PPTP, IPSEC and SIP). > sipXbridge needs static port NAT, or symmetric signalling in order to work > properly. This means when sipXbridge makes an media connection at port > 30001, it must be sent out on port 30001 (not rewritten by the firewall), > and also come back on the same port." > > 2. Have you run all the diagnostic tests and made sure all the DNS tests > passed at the server? > > 3. Is your eyebeam/xlite phone registering via DNS SRV records or by > hostname? > > On Thu, Nov 19, 2009 at 7:14 PM, Jordan Turner < > jordan.turner1...@yahoo.com> wrote: > > Let me ask this question another way. > > 1. I have setup new install of sipXecs 4.0.2 and sipXecs 4.0.3 including > the patch for the sipXbride at work. I have enabled all roles for the > server. I do not currently have an ITSP or SIP Trunk configured for a > particular provider. I have two computers at home with eyebeam 1.5.x on > each one. I can connect each softphone to my work with either sipXecs > server, but I cannot call or dial the other softphone directly (at my home > again). > > 2. If delete the default sipXbridge-1, and create a test SBC (also changing > the Internet calls to use this new test SBC), then I can call each of my > softphone at home by using the extensions I created for each phone. > > 3. If I add an ITSP, I can no longer use this test SBC I created and I have > to reinstall the sipXbridge-1 by unchecking and re-checking the SIP Trunk > Server role. I also change Internet calls through sipXbridge-1 again. Then > I can make phone calls outbound via Flowroute or other ITSP – I still cannot > dial by extension directly to my other house softphone or IP phone. > > What am I missing here? Not being very advance on sipXecs, am I needing a > dial plan, or something else. > > > > > _______________________________________________ > sipx-users mailing list sipx-users@list.sipfoundry.org > List Archive: http://list.sipfoundry.org/archive/sipx-users > Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users > sipXecs IP PBX -- http://www.sipfoundry.org/
_______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
