FIREWALL BLOCKING AUDIO

[girishpeswani]

Hi ,

I have configured my 3cx server to register with a VOIP provider and the account registers perfectly.

When I call the remote partly I can hear the Bell ringing , when the caller ansusers there is no audio heard nor is the remote party able to hear me.

the server logs gives the following error :

MediaServerReporting::RTPReceiver

[MS105000] Call(13) Ln:10008@N4i: No RTP packets were received on 00000017@:remoteAddr=202.71.134.18:23828,extAddr=122.169.100.116:57798,localAddr=0.0.0.0:9002

Can any one throw some light on how to resolve this issue and appropriately confiure the firewall rules to allow the audio packets to pass through and reach the SIP client too ?

awaiting response

girish

 

[dyntech]

Have you opened the appropriate ports on the firewall?

 

[girishpeswani]

Thanks for responding.

I am using Kerio Firewall for windows. I have opened UDP PORT 5060 & 9000-9499 in the NAT rules.

I have also enabled port forwarding for SIP traffic orginating from the Internet to be forwarded to the SIP server local IP address ( One to One Nat translation) as per their FAQ online.

Are there any other ports required to be opened ?

Awaiting response
girish

 

[dyntech]

I have also enabled port forwarding for SIP traffic orginating from the Internet to be forwarded to the SIP server local IP address ( One to One Nat translation) as per their FAQ online.

Have you done the same for the 9000-9499 ports? These are the ports the audio will use.

 

[girishpeswani]

Yes I have opened Ports 9000-9499 also. How do i check if the port forwards are working.

Where should the ports be forwarded to the 3cx SERVER IP ADDRESS or to the SIP clients IP address ?

 

[dyntech]

All ports should be forwarded to the 3CX Server.

 

[girishpeswani]

I have tried both port forwards to 3CX server Ip address and to client Ip address too.

still no results.

 

[dyntech]

If you forward the ports to your 3CX server and try to make a call, what happens?

Can you post the logs?

 

[dyntech]

Does your phone show that it is registered on the server?

Did you check "Bind to Media Server" in the extension setup?

 

[girishpeswani]

yes , sip account is registered with VOIp service provider.

"Bind to media server " has not been enabled for the extension .

"PBX deliver audio" has been enabled.
Is this correct ?

girish

 

[girishpeswani]

If you forward the ports to your 3CX server and try to make a call, what happens?

Can you post the logs?[/quote

REPLY :

The logs are there in the 1st posting.
What other logs do you want me to post ? I can do the same.

 

[dyntech]

Were the ports forwarded to the right destination at that time?

 

[Urbok]

are you sure that you are able to register a standard sip client behind this kerio firewall? you can test forwarding a TCP port to the 3cx server and trying with a telnet to see if this forward works!

 

[dete]

this inssue is very comon

I have the same problem if I work over Internet I can heard, but the network phone can't heard me, or if you prefer I can't send audio over internet, but my my IPphones inside my network can send me sound. Please I want to solve it

 

[dyntech]

Dete, have you forwarded all the necessary ports?

 

[Mirzab]

Just my two cents worth - ports are often the culprit and I always quote a really good thread covering ports:

List of default ports used by the 3cx phonesystem:
5060 (stanard sip port) TCP/UDP
5061 (secondary sip port) TCP/UDP
5480 (portgre) (only on local machine)
5481 (apache) (only on local machine)
5482 (media server) (only on local machine)
3478 (STUN Server) TCP/UDP
7000-7500 (Default port for internall calls) (only on local machine)
9000 - 9003 (ports for external calls through VOIP Gateway) UDP
10000-20000 (RTP ports) (Used if no stun available for audio)

You can read thread here: http://www.3cx.com/forums/categorie...is-gets-a-sticky-1697/?highlight=ports+sticky
If you have read then just ignore me . If not, please make sure your setup matches. Port forwarding is to 3CX Server and for most routers the major concern is inbound. With Kiero I have little knowledge so you will have to judge if outbound required anywhere.

 

[dete]

Yes I'm Sure

in my desperetion, I open all ports, TCP & UDP, but the remote system can't send audio

 

[dete]

Yes I'm Sure

Finally I open all ports, tcp & UPD but the remote system can't send audio to the local network

 

[Anonymous]

Are you doing routing witht the firewall?

If you opened all the ports you should be able to get the audio going, mind you if you have routing going as part of your firewall you might not get the RTP due to STUN issue.

Make sure you have a working STUN in your Config on 3CX.

Than start the following scenario:

Extension to extension
External into extension
External into voice mail of extension
Extension to external

Also remember that if you set your extensions to be external your 7000 range ports need to be open.

But you mentioned that you have all the TCP & UPD ports are open.

Have you actually tried with out the firewall? EG use a different gateway to the internet?