dyndns probs

[Amphibian]

Hey team,
Elastix 2.4.0.2
Usin CSF Firewall

For some reason I can't seem to get my dyndns.org to work properly. I have entered my dyndns.org name within CSF under lfd Dynamic DNS. I have also entered information within the following files:

iax_custom_config

bindport = 4569 ; Port to bind to (IAX is 4569. Forward this port to your Asterisk box)
externhost = xxxxxxxxxx.dyndns.org ;
;externip = 122.107.29.48
localnet = 192.168.1.0/255.255.255.0
bindaddr = 0.0.0.0 ; Address to bind to (all addresses on machine)
delayreject = yes
jitterbuffer = yes
mailboxdetail = yes

sip_general_custom_conf

nat = yes
externhost = xxxxxxxxxx.dyndns.org ; < -- Do not use this for Pennytel – leave it out
localnet=192.168.1.0/255.255.255.0
externrefresh = 10

sip_nat_conf

nat = yes
externhost = xxxxxxxxxx.dyndns.org ; < -- Do not use this for Pennytel – leave it out
localnet=192.168.1.0/255.255.255.0
externrefresh = 10

Within CSF I have the following ports:
TCP IN: 5222
TCP Out: 20,21,22,25,53,80,110,113,443,4569,5222,5223,1000:65000

UDP IN: (Blank)
UDP OUT: 20,21,53,113,123,443,4569,5222,5223,1000:65000

If Correct, CSF allows all ports in/out from dyndns.org?
If correct, I believe these are the only files that need to be modified?
And, If I am correct, based on what I have read and researched, using the likes of a softphone from the donut shop's free wifi that AIX is the better option over sip. Is this correct?

Using Zoiper Softphone on a andriod tablet I get the following results:

AIX Host Info:
xxxxxxxxxx.dyndns.org:4569 will not register while internal or external to my network

SIP Host Info:
xxxxxxxxxx.dyndns.org:5060 will work when I'm internal of my network but not external of it.

When I run the following cmd (asterisk -rvvvvvvvvvvv) on console I can see the sip account register while I am within the internal network but see nothing when one tries when external. Same with the AIX, no see anything trying internal or external.

What am I mssing here? Any suggestions? Ideas on the direction I should continue?

Thanks in advance

amphibian

 

[DaveD]

Dyndns is soon to no longer be free, you will need to take a VIP account to continue.
I am not sure if this has kicked in already or not.

Log into your dyndns account and check the status, it should offer you the VIP upgrade on login

 

[Amphibian]

Sir DaveD,

Thanks for the quick response.

So far dyndns.org is still working. I failed to mention that I can do a www.xxxxxxx.dyndns.org and I can see my web page without problems, also I can do a https://xxxxxxxxxx.dyndns.org and it will take me to the login page for the Elastix server.

I have the required ports in router forwarded that way. I'm thinking there maybe a problem with the way my sip/aix is being forwarded from dyndns.org. It did work last year before I upgraded to Elastix 2.4. I really wasn't using my tablet from outside my network so I never set it up till last month and haven't gotten it to work yet.

Thank you Sir
amphibian

 

[DaveD]

Asterisk sip settings

NAT = yes

select public ip

save and apply

 

[Amphibian]

Sir DaveD,

"Asterisk sip settings
NAT = yes
select public ip
save and apply"

Not following....... Where are you saying to enter these?

Also, while you were veiwing my original post I was modifing it, could you look it over and see if the CSF ports are correct please?

 

[DaveD]

CSF rules look fine

In freepbx I have sip.conf set as public ip not static

Have nat set to yes

 

[Amphibian]

Sir DaveD,

That is how I have mine set.

Im trying to get dyndns.org to work so that I don't have to enter a IP address to allow file for everywhere I am.
If I enter a remote IP address into the allow file and enter my public IP then all works well, but it's becoming a pain to keep entering Ip's. Hence the dyndns.org to make it easier for me to use.


Thanks,
amphibian

 

[DaveD]

Check in CSF that you have dyndns module activated

 

[Amphibian]

That would be in csf at:

DYNDNS_IGNORE =1 must be set to 1 correct?

amphibian

 

[DaveD]

That all seems correct

 

[Amphibian]

Sir DaveD,

Do I need to put the ports 4569 & 5060 in the "UDP IN" of CSF?

amphibian

 

[DaveD]

You already have those ports open with 1000:65000

 

[Amphibian]

Sir DaveD,

That is correct for the "UDP Out" section but not for the "UDP In" section. I was wondering if I needed to place it in the "UDP In" section.

I did a port check at dyndns.org site and see that it is telling me that it is blocked, so later this night I will disable csf and see if it is within csf.

Thank you Sir,

amphibian

 

[Amphibian]

Ok, if I disable csf, then go to dyndns.org and use their open port tool and enter port number 5060 or 4569 I get a:

"An attempted connection to xxx.xxx.xxx.xxx:4569 was refused. This typically indicates that there are no services available on that port, but that it is NOT being blocked by a firewall or your ISP". (xxx are for blocking my Ip address purposes)

If I activate csf and enter the same ports I get the following:

"An attempted connection to xxx.xxx.xxx.xxx:4569 timed out. This typically indicates that traffic to that port is being actively blocked by either a firewall or your ISP."

I'm not sure I fully understand what is happening here. Strange happenings.

amphibian

 

[Amphibian]

Sir DaveD,

If I place in the "UDP IN" the ports 5060 and 4569 do you know if that will allow anyone using those ports to pass thru csf or will csf still block all except those within the allow list?

Even though I have the xxxxxxxxxx.dyndns.org listed 5060 and 4569 will not pass thru csf unless I disable csf or enable csf with those ports listed wihin the "UDP IN".

I have requested to joing csf forum but haven't been accepted yet so I don't want to leave those ports listed in UDP IN if it will allow anyone to pass thru.

Thank you Sir,

amphibian

 

[DaveD]

amphibian

The ports will only allow through what IP's you allow.

Maybe a reinstall of CSF might be needed something is not right, without physically looking at the system I would be guessing

 

[Amphibian]

Sir DaveD,

Thank you sir, I think I will do just that and reinstall csf.


amphibian