[Asterisk-Users] Re: IAX2 Rejected connection attempt (voiptalk.org)

[Tony Mountifield]

Mark Benson <mark.benson at iqit.co.uk> wrote:
> Cheers Tony,
> 
> That sorted it! - have passed this info onto voiptalk to update their 
> help pages
> 
> You wouldn't care to add an explanation as to why user works over friend?

Putting friend instead of user would have worked just as well, but been
less obvious. It was peer that didn't work in the [08700nnnnnn] section.

The use of friend is as follows:

If you have two identically-named sections, one of type=peer and the other
of type=user, and there are no entries that are in both with the same name
but different values, then you can combine the sections as type=friend.

When Asterisk wants details for an outgoing call, it looks for a matching
section [whatever] with type=friend or type=peer, and takes the details
from that. When it wants details for an incoming call, it looks for a
matching section [whatever] with type=friend or type=user.

In the case of voiptalk, friend isn't useful unless you name your outgoing
section [08700nnnnnn] and use Dial(IAX2/08700nnnnnn/${EXTEN}). In that
case you could use type=friend, but I think that makes things less clear.

Hope this helps!

Cheers
Tony

> Cheers,
> 
> Mark
> 
> Tony Mountifield wrote:
> 
> >Mark Benson <mark.benson at iqit.co.uk> wrote:
> >  
> >
> >>Tony Mountifield wrote:
> >>    
> >>
> >>>Mark Benson <mark.benson at iqit.co.uk> wrote:
> >>>      
> >>>
> >>>>Have a problem that I have been battling with for a few days now with 
> >>>>help from voiptalk.org support.but I thought someone here might have 
> >>>>seen this before.
> >>>>
> >>>>I have an asterisk box running on a real non nat'ed ip address with an 
> >>>>incoming number from voiptalk.org on IAX2.
> >>>>
> >>>>The problem I am seeing with or without firewall rules in place (port 
> >>>>4569 udp open or all ports open ie firewall rules flushed) is rejected 
> >>>>connection attempt from xxx.xxx.xxx.xxx which is voiptalks IAX server...
> >>>>        
> >>>>
> >>>Where is this message coming from? Asterisk? kernel IPtables? Also, where
> >>>is it appearing?  e.g. /var/log/messages, console, or Asterisk log file.
> >>>
> >>>What does your iax.conf look like?
> >>>      
> >>>
> >>The message is on the asterisk console - this is all I see even if iax2 
> >>debug is on and verbose is 30+
> >>    
> >>
> >
> >OK, that says that it is Asterisk that is rejecting the connection, not
> >any firewall.
> >
> >  
> >
> >>iax.conf looks like this.... (more or less - comments removed)
> >>
> >>[general]
> >>bindport=4569
> >>
> >>allow=all                       ; same as bandwidth=high
> >>disallow=lpc10
> >>
> >>jitterbuffer=no
> >>
> >>[voiptalk]
> >>type=peer
> >>username=xxxxxxxx
> >>secret=xxxxxx
> >>context=default
> >>host=iax.voiptalk.org
> >>
> >>[08700nnnnnn]
> >>type=peer
> >>username=08700nnnnnn
> >>context=default
> >>host=iax.voiptalk.org
> >>
> >>Last two items as per voiptalks' instructions (user and pass and 0870 no 
> >>removed for list)
> >>    
> >>
> >
> >The [08700nnnnnn] section should be type=user, not type=peer. That is
> >almost certainly the cause of your problem. Also, some items are not
> >required, and will be ignored (e.g. [voiptalk] doesn't need context, and
> >[08700nnnnnn] doesn't need username or host).
> >
> >Here is my working setup:
> >
> >[08700nnnnnn]
> >type=user
> >notransfer=yes
> >context=voiptalk-incoming
> >
> >[voiptalk]
> >type=peer
> >username=xxxxxxxx
> >secret=xxxxxx
> >host=iax.voiptalk.org
> >notransfer=yes
> >;trunk=yes
> >qualify=yes
> >
> >
> >Hope this helps!
> >
> >Cheers
> >Tony
> >
> >  
> >
> 
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
> 


-- 
Tony Mountifield
Work: tony at softins.co.uk - http://www.softins.co.uk
Play: tony at mountifield.org - http://tony.mountifield.org