<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div><blockquote type="cite" class=""><div class="">On 18/10/2016, at 12:30 am, Jerry Geis <<a href="mailto:geisj@pagestation.com" class="">geisj@pagestation.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="">I am running iptables on the 10.201 machine. I have not control over the other machine. It is a microsoft lync product.</div><div class="gmail_extra"><br class=""></div><div class="gmail_extra">my definition...</div><div class="gmail_extra"><div class="gmail_extra">[MyTrunk]</div><div class="gmail_extra">type=friend</div><div class="gmail_extra">dtmfmode=rfc2833</div><div class="gmail_extra">disallow=all</div><div class="gmail_extra">allow=ulaw</div><div class="gmail_extra">allow=alaw</div><div class="gmail_extra">context=my-incoming</div><div class="gmail_extra">host=192.168.1.3</div><div class="gmail_extra">;port=5068</div><div class="gmail_extra">canreinvite=yes</div><div class="gmail_extra">qualify=yes</div><div class="gmail_extra">transport=tcp</div><div class=""><br class=""></div><div class="">I have tried it with or without the port=5068.</div></div></div></div></blockquote><div><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_extra"></div></div></div></blockquote></div><div><span style="font-size: small; orphans: 2; widows: 2;" class="">Heya Jerry</span></div><div><div dir="ltr" class=""><div class="gmail_extra"><span style="font-size: small; orphans: 2; widows: 2;" class=""><br class=""></span></div><div class="gmail_extra"><span style="font-size: small; orphans: 2; widows: 2;" class="">With port=5068 and transport=tcp both defined, do calls outbound to the Lync device fail, or is it just registrations FROM it that are failing?</span></div></div></div><div class=""><div apple-content-edited="true" style="orphans: 2; widows: 2;" class=""><font size="2" class=""><br class=""></font></div><div apple-content-edited="true" style="orphans: 2; widows: 2;" class=""><font size="2" class="">I seem to recall you mentioning it's registrations that aren't working. However for those to work you would need your Asterisk on 10.201 to also be listening for registrations via TCP, and on port 5068. I'm thinking this would be a global configuration definition, not a peer-specific definition. Others may be able to chime in with the specific options required...</font></div><div apple-content-edited="true" style="orphans: 2; widows: 2;" class=""><font size="2" class=""><br class=""></font></div><div apple-content-edited="true" style="orphans: 2; widows: 2;" class=""><font size="2" class="">Pete</font></div></div></body></html>