[Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum retries exceeded on call

[James Sizemore]

Some firewalls when doing nat will alter the return address (need to 
make nat work)
but not recalculate the header checksum,  (Sonic walls come to mind.), 
Linux  will
proply delete any tcp/udp packet that fails its checksum at the kernel 
level, and send
an error to the app.  If this is happening to you Asterisk should log 
some kind of error.


AstGrp wrote:

>Update...
>
>I did some more testing today.. And with the same setup but one box
>behind a Linksys router and another box behind a Pix firewall.. The
>linksys works with no problems... So it appears to be how the PIX is
>handling NAT & SIP...  If any one has any thoughts on this , it would be
>greatly appreciated.
>
>And thank you James for the support you have given today.
>
>Thanks,
>
>gcc
>
>-----Original Message-----
>From: asterisk-users-admin at lists.digium.com
>[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of AstGrp
>Posted At: Friday, March 12, 2004 4:29 PM
>Posted To: Asterisk User Group
>Conversation: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
>retries exceeded on call
>Subject: RE: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
>retries exceeded on call
>
>
>Do I need to associate the outside interface of the PIX with the phone
>on the inside.. I don't remember doing this before...
>
>Setup ----
>
>* Server ---> PIX FW ---> WWW CLOUD ----> PIX FW ---> IP Phone
>
>Again the only difference than before is the First PIX FW.... Old setup
>was.... (Different server though)
>
>* Server ----> Linksys Router ----> WWW CLOUD ----> PIX FW ----> IP
>Phone
>
>Any thoughts?
>
>-----Original Message-----
>From: asterisk-users-admin at lists.digium.com
>[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of James
>Sizemore Posted At: Friday, March 12, 2004 2:58 PM Posted To: Asterisk
>User Group
>Conversation: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
>retries exceeded on call
>Subject: Re: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
>retries exceeded on call
>
>
>The pings are pinging the out side port on the nat device,  You don't 
>have a
>rule in your nat table to associate it with a device on the inside.  You
>
>should
>reset the phone and then see if the qualify shows a return time.  You
>will need to make the phone register every time you change you config
>till the qualify shows a time. A good way to do this is to reboot the
>phone. Your nat device will have a default time that it keep nat rules
>in its 
>table.
>Your qualify time will need to be lower then this value.
>
>AstGrp wrote:
>
>  
>