Re: [Astlinux-users] SIP Options ping not working

[Michael K. <mic...@ip...>]

Thanks Lonnie. Good call. That will be my next test.
PS IP Address stays the same.

Regards
Michael Knill

On 5/7/18, 9:14 am, "Lonnie Abelbeck" <li...@lo...> wrote:

    Michael,
    
    My theory has always been your problem is with an upstream firewall.
    
    Stopping asterisk for a period of time may allow upstream firewall states to expire.
    
    By rebooting AstLinux you will do the same (stop/start Asterisk) and if you have PPPoE you may pull a different IP address which will bypass any upstream states.
    
    From all you have described, this looks to me to be an upstream issue relative to AstLinux.
    
    Lonnie
    
    
    
    > On Jul 4, 2018, at 4:56 PM, Michael Knill <mic...@ip...> wrote:
    > 
    > And yes good test. Of course a firewall restart does not clear translations.
    > Am I able to clear firewall translations without waiting for them to time out which is what I assume you are doing here?
    > It would have to be dome from a remote session as well e.g. through the firewall.
    > 
    > Regards
    > Michael Knill
    > 
    > On 4/7/18, 10:41 pm, "Lonnie Abelbeck" <li...@lo...> wrote:
    > 
    >> So my questions are:
    >> • Is tcpdump BEFORE the firewall?
    > 
    >    For incoming packets tcpdump is before the firewall, for outgoing packets tcpdump is after the firewall, ie.
    >    --
    >    wire -> NIC -> tcpdump -> netfilter/firewall
    > 
    >    netfilter/firewall -> tcpdump -> NIC -> wire
    >    --
    >    so tcpdump does not see outbound packets blocked by the firewall.
    > 
    > 
    >> • What tests should I do next?
    > 
    >    Have you ever tried ...
    >    --
    >    service asterisk stop
    >    sleep 90
    >    service asterisk init
    >    --
    > 
    > 
    >    Lonnie
    > 
    > 
    > 
    > 
    > 
    >> On Jul 3, 2018, at 10:19 PM, Michael Knill <mic...@ip...> wrote:
    >> 
    >> Back to the ongoing saga of SIP Options ping not working. This one is a bit different though. Here is the scenario:
    >> 
    >> 	• Can SSH into box fine and network connectivity is fine
    >> 	• Find IP Address based SIP Trunk is UNREACHABLE. Can ping provider from the box
    >> 	• Asterisk SIP Debug shows SIP Options sent but none received. This is also the case using tcpdump on the ppp0 interface
    >> 	• Asterisk reload and Firewall restart did not fix the problem. The system needed a full reboot for the trunk to be REACHABLE
    >> 
    >> So my questions are:
    >> 	• Is tcpdump BEFORE the firewall?
    >> 	• Can you think of what the issue could be?
    >> 	• What tests should I do next?
    >> 
    >> Unfortunately (or fortunately) this happens very infrequently so the fix will be a long confirmation period.
    >> 
    >> Thanks all!
    >> 
    >> Regards
    >> Michael Knill
    >> ------------------------------------------------------------------------------
    >> Check out the vibrant tech community on one of the world's most
    >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot_______________________________________________
    >> Astlinux-users mailing list
    >> Ast...@li...
    >> https://lists.sourceforge.net/lists/listinfo/astlinux-users
    >> 
    >> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
    > 
    > 
    >    ------------------------------------------------------------------------------
    >    Check out the vibrant tech community on one of the world's most
    >    engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    >    _______________________________________________
    >    Astlinux-users mailing list
    >    Ast...@li...
    >    https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    >    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
    > 
    > ------------------------------------------------------------------------------
    > Check out the vibrant tech community on one of the world's most
    > engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    > _______________________________________________
    > Astlinux-users mailing list
    > Ast...@li...
    > https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    > Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
    
    
    ------------------------------------------------------------------------------
    Check out the vibrant tech community on one of the world's most
    engaging tech sites, Slashdot.org! http://sdm.link/slashdot
    _______________________________________________
    Astlinux-users mailing list
    Ast...@li...
    https://lists.sourceforge.net/lists/listinfo/astlinux-users
    
    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....