[asterisk-bugs] [JIRA] (ASTERISK-24149) Routing problems on firewall with chan_pjsip packets on port 5060 (chan_sip and/or other port working)

[Martin (JIRA)]

Martin created ASTERISK-24149:
---------------------------------

             Summary: Routing problems on firewall with chan_pjsip packets on port 5060 (chan_sip and/or other port working)
                 Key: ASTERISK-24149
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24149
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Channels/chan_pjsip
    Affects Versions: 12.4.0
         Environment: CentOS 6.5
FreePBX 12.0.1beta29
Asterisk 12.4
openVZ Container on Proxmox 3.1
            Reporter: Martin


Have a very weird bug on routing  chan_pjsip on the firewall. I thought it is a firewall/router problem but other ports than 5060 work and chan_sip works also on 5060.

Short: My phone is behind a SNAT attached to a bridge to the servernet and registers well. When I try to call the phone, the SNAT is reverted correctly but the SIP/Invite packet is not routed to the correct interface. Exactly same constellation works with chan_sip and with other ports tzhan 5060 (e.g. 5061 or 5000). Firewall rules are the same for 5060 and 5061.

Long: If it is okay, I would refer to this thread, it is explained there:
http://community.freepbx.org/t/differences-in-nat-between-chan-sip-and-pjsip/23394
If not, I will write one more summary.

I know it sounds like a problem on the router/firewall, but there really is no special configuration. If there were a problem with port 5060 I think chan_sip would not work either.

Are there any differences in packet construction between these sip stacks? I compared both invite packets in tcpdump/wireshark but I could not see a really offending problem.

In pjsip the DF flag is set and the packet is larger than in sip, but is shorter than the MTU (1500). About 1120B length.



--
This message was sent by Atlassian JIRA
(v6.2#6252)