[Asterisk-Users] SIP registration fails

[Andreas Schiffler]

Thanks for the info so far. I am still trying to asterisk'ize my ML9.2 
firewall box and can't get the external SIP registration to work. If I 
hook up my Sipura directly to the WAN it registers OK.

This is the message I get from asterisk:

Mar  8 21:03:07 NOTICE[196621]: chan_sip.c:3140 sip_reg_timeout: 
Registration for '263872 at 192.246.69.223' timed out, trying again

If tried all combinations of firewall and asterisk settings (as well as 
turning the firewall completely off). I don't understand why this would 
now work.

; SIP Configuration for Asterisk
;
[general]
port = 5060                     ; Port to bind to
bindaddr = 192.168.1.1          ; Address to bind to
localnet = 192.168.1.0          ; Internal network address
localmask = 255.255.255.0       ; Internal netmask
outside_addr = a.b.c.d    ; External network, a.b.c.d is my external IP
externip = a.b.c.d        ; Public IP
;
register=263872:mypass at fwd.pulver.com/263872
;
[fwd]
type=friend
secret=mypass
username=263872
host=fwd.pulver.com


My shorewall/rules I used looks like this (pretty open, rtp.conf was 
adjusted accordingly):
ACCEPT  masq    fw      tcp     
domain,bootps,http,https,631,imap,pop3,smtp,nntp,50600:50610
ACCEPT  masq    fw      udp     
domain,bootps,http,https,631,imap,pop3,smtp,nntp,50600:50610
ACCEPT  fw      masq    tcp     631,515,137,138,139,50600:50610 -
ACCEPT  fw      masq    udp     631,515,137,138,139,50600:50610 -
ACCEPT  loc     fw      tcp     22,5060:5070,50600:50610 -
ACCEPT  loc     fw      udp     5060:5070,50600:50610 -
ACCEPT  net     loc     udp     5060:5070,50600:50610 -
ACCEPT  net     fw      tcp     
22,4662,2234,6882,6346,9999,4444,5060:5070,50600:50610
ACCEPT  net     fw      udp     
4666,2234,6882,6346,9999,4444,5060:5070,50600:50610


Could it be a port conflict with the Sipura unit on the LAN?
The two lines register OK from the LAN on the 5060 and 5061 ports:

 -- SIP Seeding '2201' at 2201 at 192.168.1.239:5060 for 3600
 -- SIP Seeding '2202' at 2202 at 192.168.1.239:5061 for 3600