<div dir="ltr"><div>Hi Marek</div><div><br></div><div>I didn't understand your setup originally. <br></div><div><br></div><div>Can you confirm this is correct: <br></div><div><br></div><div>You provide asterisk for a number of remote phones. I assume they register to the asterisk</div><div><br></div><div>Asterisk (
198.51.100.1) <==> Phone Provider ( <a href="http://192.0.2.0/24">192.0.2.0/24</a> ) <==> Phone (
192.168.100.235
)<br></div><div><br></div><div>Your call that fail is coming from asterisk to the phone offering G711A, G729, iLBC, GSM, G723 and rtp on port 18892</div><div><br></div><div>Its unclear to me still whether the remote provider has a SIP device in front of the phones or just a firewall. The user agent for the reply is A540 which I am not familiar with</div><div><br></div><div>The call that works shows the Asterisk sending to the internal ip until it receives rtp from the remote phone from which it learns its address and port and redirects the rtp to. This is fairly standard</div><div><br></div><div>For the case of the call that doesn't work, your asterisk receives the rtp with the external address but doesn't learn from it. </div><div><br></div><div>You haven't provided the full call data including the close down of the call and the registrations would have been helpful too but no matter.<br></div><div><br></div><div>The question is why your asterisk didn't learn the external address
and port
from the received rtp packet <br></div><div><br></div><div>You can look at your logs with debug to see what decisions its making. You can see if different rtp ports have different results. <br></div><div>Your phone provider has rtp on 5010 unsuccessfully and 5016 successfully. </div><div>Your asterisk uses rtp 13786 successfully and fails when using 18892. Is it possible your firewall is blocking port 18892 and so asterisk never sees the returned packet and can't learn from it? <br></div><div><br></div><div>In any event you should put your debug on and look at your logs in asterisk to see what it sees and why it doesn't react to the rtp packet, if it gets it<br></div><div><br></div><div>Have fun, its all good learning.<br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Sep 5, 2021 at 6:27 PM Marek Greško <<a href="mailto:mgresko8@gmail.com">mgresko8@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hello,<br>
<br>
regarding the ipv6, you see nothing about that it should be some type<br>
of ipv6 tunnelling, because also MTU is lower than expected. You<br>
should not see any ipv6 related communication in the sniff. Phone is<br>
not aware of it.<br>
<br>
The asterisk's static public ip address is 198.51.100.1.<br>
The remote provider's dynamic nat pool is <a href="http://192.0.2.0/24" rel="noreferrer" target="_blank">192.0.2.0/24</a>. By provider we<br>
mean internet provider the remote phones are behind. We are not<br>
complaining about voip provider, we have no problem with that. Only<br>
communication between asterisk and remote phones behind some internet<br>
provider. This is the only conversation to look at.<br>
The phone private address is 192.168.100.235.<br>
<br>
Thanks<br>
<br>
Marek<br>
<br>
<br>
2021-09-05 1:11 GMT+02:00, Duncan Turnbull <<a href="mailto:duncan@e-simple.co.nz" target="_blank">duncan@e-simple.co.nz</a>>:<br>
><br>
><br>
>> On 5/09/2021, at 10:21 AM, Marek Greško <<a href="mailto:mgresko8@gmail.com" target="_blank">mgresko8@gmail.com</a>> wrote:<br>
>><br>
>> Hello,<br>
>><br>
>> could you please answer my previous question about anonymizing several<br>
>> parameters? I have the data ready, but will post after answer. I have<br>
>> no clue whether I could disclose some important data not deleting<br>
>> them.<br>
>><br>
>> Regarding sdp, the address will be the internal one, since the phone<br>
>> is behind nat and it is not aware of the nat. The provider's nat<br>
>> device is configured as dump nat, no application tweaking is done. So<br>
>> the asterisk will see the lan address in the sip.<br>
>><br>
> There are two conversations to look at<br>
> Provider to Asterisk<br>
> Asterisk to Phone<br>
> You need the packet captures of both.<br>
><br>
> Your statements are mixing them up<br>
><br>
> I don’t know what you mean by LAN address, that’s an ambiguous term. The ip<br>
> your asterisk receives from the provider should be the providers external ip<br>
> or in the sdp the external address of the media server which may or may not<br>
> be the same device<br>
><br>
>> In the working scenario it is sending rtp packets to the internal<br>
>> address which is wrong, but after receiving cca 5 rtp packets from the<br>
>> phone it somehow discovers correct nat ip/port and switches to it. In<br>
>> non-working scenario it never switches and still sends to the lan<br>
>> address. Strange there is no audio, even one direction. Another<br>
>> strange thing is there are 2 phones (different vendors) behind the<br>
>> same nat and the problem appearance on them is independent, sometimes<br>
>> the first has problem, sometimes the second and sometimes both.<br>
>><br>
>> The tcpdumps are made on the asterisk side. I have currently no means<br>
>> of capturing on phone side.<br>
>><br>
>> Marek<br>
>><br>
>> 2021-09-04 23:56 GMT+02:00, Antony Stone<br>
>> <<a href="mailto:Antony.Stone@asterisk.open.source.it" target="_blank">Antony.Stone@asterisk.open.source.it</a>>:<br>
>>>> On Saturday 04 September 2021 at 22:13:32, Marek Greško wrote:<br>
>>>><br>
>>>> Hello,<br>
>>>><br>
>>>> I agree my knowledge of SIP itself is poor, but I have quite well<br>
>>>> general tcp/ip understanding. What sip parameters should be<br>
>>>> anonymized? How about tag, branch, call-id, cseq values?<br>
>>><br>
>>> Show us your packet captures with meaningful addresses (not necessarily<br>
>>> accurate ones, but at least unambiguous - see my previous suggestion re<br>
>>> RFC5737) and we can help you to understand them and what they mean.<br>
>>><br>
>>><br>
>>> Antony.<br>
>>><br>
>>> --<br>
>>> Heisenberg, Gödel, and Chomsky walk in to a bar.<br>
>>> Heisenberg says, "Clearly this is a joke, but how can we work out if it's<br>
>>> funny or not?"<br>
>>> Gödel replies, "We can't know that because we're inside the joke."<br>
>>> Chomsky says, "Of course it's funny. You're just saying it wrong."<br>
>>><br>
>>> Please reply to the<br>
>>> list;<br>
>>> please *don't* CC<br>
>>> me.<br>
>>><br>
>>> --<br>
>>> _____________________________________________________________________<br>
>>> -- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
>>><br>
>>> Check out the new Asterisk community forum at:<br>
>>> <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org/</a><br>
>>><br>
>>> New to Asterisk? Start here:<br>
>>> <a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wiki/display/AST/Getting+Started</a><br>
>>><br>
>>> asterisk-users mailing list<br>
>>> To UNSUBSCRIBE or update options visit:<br>
>>> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
>><br>
>> --<br>
>> _____________________________________________________________________<br>
>> -- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
>><br>
>> Check out the new Asterisk community forum at:<br>
>> <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org/</a><br>
>><br>
>> New to Asterisk? Start here:<br>
>> <a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wiki/display/AST/Getting+Started</a><br>
>><br>
>> asterisk-users mailing list<br>
>> To UNSUBSCRIBE or update options visit:<br>
>> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
><br>
> --<br>
> _____________________________________________________________________<br>
> -- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
><br>
> Check out the new Asterisk community forum at:<br>
> <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org/</a><br>
><br>
> New to Asterisk? Start here:<br>
> <a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wiki/display/AST/Getting+Started</a><br>
><br>
> asterisk-users mailing list<br>
> To UNSUBSCRIBE or update options visit:<br>
> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
<br>
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
Check out the new Asterisk community forum at: <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org/</a><br>
<br>
New to Asterisk? Start here:<br>
<a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wiki/display/AST/Getting+Started</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a></blockquote></div>