shouldn't the 1:1 nat e able to translate as to which public ip the sipx 
requests should go, and to where to return them to?


On Feb 22, 2010, at 5:42 PM, Tony Graziano wrote:

> Your instance is different in that you have multiple public IP's.
> 
> Specifically I do not know if your phone is on a different subnet than your 
> DATA network. 
> 
> With mulitiple public IP's, I would suspect your firewall LAN rule would have 
> to include one that pointed the all the same protocols/ports towards the 
> public IP designated for sipx, otherwise the return route "would not match" 
> the forwarding destination you've setup on the NAT configuration.
> 
> On Mon, Feb 22, 2010 at 5:16 PM, Francis Tinio <fti...@toqen.com> wrote:
> What do you mean by source rules?  Are you referring to the LAN side of 
> firewall rules?  I have the default setting of allowing Lan subnet access to 
> any destination.  I checked this against the xml you have in your blog and I 
> think I have the same Lan rules.  Also, I assume that the incoming calls 
> should still go through with this default rule, but the call does not go 
> through at all.
> 
> 
> 
> ----- Original Message -----
> From: "Tony Graziano" <tgrazi...@myitdepartment.net>
> To: fti...@toqen.com, sipx-users@list.sipfoundry.org
> Sent: Monday, February 22, 2010 9:44:12 AM GMT -05:00 US/Canada Eastern
> Subject: Re: [sipx-users] PfSense and Sipx...no inbound audio, or calls going 
>  through
> 
> Because you are using multiple public ip's, you need to creat source rules
> too.
> ============================
> Tony Graziano, Manager
> Telephone: 434.984.8430
> Fax: 434.984.8431
> 
> Email: tgrazi...@myitdepartment.net
> 
> LAN/Telephony/Security and Control Systems Helpdesk:
> Telephone: 434.984.8426
> Fax: 434.984.8427
> 
> Helpdesk Contract Customers:
> http://www.myitdepartment.net/gethelp/
> 
> ----- Original Message -----
> From: sipx-users-boun...@list.sipfoundry.org
> <sipx-users-boun...@list.sipfoundry.org>
> To: sipx-users <sipx-users@list.sipfoundry.org>
> Sent: Mon Feb 22 09:28:05 2010
> Subject: [sipx-users] PfSense and Sipx...no inbound audio,      or calls going
> through
> 
> I reinstalled sipx since I replaced our subnet and firewall from endian to
> pfsense.  With pfsense, I cannot get any incoming calls.  From my cell, I
> don't hear anything when I try to dial my incoming DID number.  Not even the
> operator IVR.
> 
> I have setup Pfsense with my public IPs as virtual Proxy ARP IPs.  Then I
> created 1:1 NAT and set outbound proxy to advance and remove the default
> entry that was created.  For the firewall rules I have enabled the WAN side
> as well to listen for the following ports: 80, 21, 8443, 12000, 30000 to
> 31000. LAN Firewall rules I did not touch.
> 
> I have outgoing working.  But incoming is not going through.  Although in
> CDR, for both sipx and Gateway CDR, the calls are showing.
> 
> Any advice?
> _______________________________________________
> sipx-users mailing list sipx-users@list.sipfoundry.org
> List Archive: http://list.sipfoundry.org/archive/sipx-users
> Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
> sipXecs IP PBX -- http://www.sipfoundry.org/
> 
> 
> 
> -- 
> ======================
> Tony Graziano, Manager
> Telephone: 434.984.8430
> Fax: 434.984.8431
> 
> Email: tgrazi...@myitdepartment.net
> 
> LAN/Telephony/Security and Control Systems Helpdesk:
> Telephone: 434.984.8426
> Fax: 434.984.8427
> 
> Helpdesk Contract Customers:
> http://www.myitdepartment.net/gethelp/
> 
> Why do mathematicians always confuse Halloween and Christmas?
> Because 31 Oct = 25 Dec.
> 

_______________________________________________
sipx-users mailing list sipx-users@list.sipfoundry.org
List Archive: http://list.sipfoundry.org/archive/sipx-users
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to