[asterisk-bugs] [JIRA] (ASTERISK-27371) Serious Network Trouble Errors with TCP Enabled

[Kevin Harwell (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-27371?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kevin Harwell updated ASTERISK-27371:
-------------------------------------

    Assignee: Steven Sedory  (was: Unassigned)
      Status: Waiting for Feedback  (was: Triage)

> Serious Network Trouble Errors with TCP Enabled
> -----------------------------------------------
>
>                 Key: ASTERISK-27371
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-27371
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Channels/chan_sip/General
>    Affects Versions: 13.17.2
>         Environment: FreePBX 13.0.192.19 and Asterisk 13.17.2, proxmox 4.4 on Dell R720, local RAID volume. Using TCP and obscure port for SIP. UDP 5060 still open/enabled, but firewalled to only allow Anveo Direct servers.
>            Reporter: Steven Sedory
>            Assignee: Steven Sedory
>
> Per the environment explained above we are setup. The TCP port we use for our endpoints is 57875. The only other SIP traffic is UDP 5060 to Anveo Direct servers. UDP 10,000-20,000 is allowed from any for RTP. We also set qualify to 25 seconds to help keep NAT holes open. 
> That said, we get lots of errors like below (X.X.X.X has replaced IP's):
> {noformat}
> [2017-10-23 08:13:05] WARNING[10930] chan_sip.c: sip_xmit of 0x7f6058024ba0 (len 670) to X.X.X.X:50664 returned -2: Interrupted system call
> [2017-10-23 08:13:05] ERROR[10930] chan_sip.c: Serious Network Trouble; __sip_xmit returns error for pkt data
> [2017-10-23 05:01:57] WARNING[21567] chan_sip.c: sip_xmit of 0x7f60b0005150 (len 714) to X.X.X.X:50567 returned -2: No such file or directory
> [2017-10-23 05:01:57] ERROR[21567] chan_sip.c: Serious Network Trouble; __sip_xmit returns error for pkt data
> [2017-10-23 08:12:37] WARNING[10930] chan_sip.c: sip_xmit of 0x7f6058023360 (len 670) to X.X.X.X:50664 returned -2: Broken pipe
> [2017-10-23 08:12:37] ERROR[10930] chan_sip.c: Serious Network Trouble; __sip_xmit returns error for pkt data
> {noformat}
> Now, if I have the endpoints switch to UDP 5060, the errors go away. That said, shouldn't we be able to use TCP and almost any port and work just fine?
> We use an obscure port so we can open an obscure port to any, allowing endpoints to be registered from essentially any internet connection with much less security risk. And we use TCP, as it seems to eliminate most NAT traversal issues.



--
This message was sent by Atlassian JIRA
(v6.2#6252)