<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">The solution to this is to set up the outbound NAT like this:<div><img height="184" width="320" apple-width="yes" apple-height="yes" apple-inline="yes" id="2B74DCAB-0ADB-4A3E-8B92-73BEB4141875" src="cid:630DE14B-6E84-44A0-8057-BCA857B30DE9"></div><div><br></div><div>And then do Diagnostics -> States -> Filter on the node’s IP address -> Kill. All services including ssh will be temporarily dropped and automatically restarted.</div><div><br></div><div><img height="240" width="265" apple-width="yes" apple-height="yes" apple-inline="yes" id="4318CD66-E557-4D2E-8ACD-2AAF3B125F80" src="cid:9D009AD5-A1B6-44C1-A3C2-94DC429564E7"></div><div><br></div><div><br></div><div>Thank you Mike KB6GZL for your help with this<br><div>
<span class="Apple-style-span" style="border-collapse: separate; font-family: Verdana; border-spacing: 0px;"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Verdana; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">--<br>Tim<br>:wq</div></span></span>
</div>
<br><div><div>On Aug 22, 2014, at 8:01 AM, Tim Sawyer <<a href="mailto:tim.sawyer@mac.com">tim.sawyer@mac.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Mike,<div class=""><br class=""></div><div class="">Thanks I’ll try that as soon as the pfsense router gets reinstalled. Just for grins could you do “iax2 show registry”? Is the perceived port correct?</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-family: Monaco;" class="">*CLI> iax2 show registry </div><div style="margin: 0px; font-family: Monaco;" class="">Host dnsmgr Username Perceived Refresh State</div><div style="margin: 0px; font-family: Monaco;" class="">67.215.233.178:4569 N 2504 108.13.3.89:4569 60 Registered</div><div class="">
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px;"><div class="">--</div><div class="">Tim WD6AWP</div></span>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Aug 22, 2014, at 7:56 AM, Michael Wolthuis <<a href="mailto:wolthuis@gmail.com" class="">wolthuis@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif;" class=""><div class="">Tim,</div><div class="">I run PFSense with many of my Allstar nodes. I have to set STATIC outbound NAT for the specific IP addresses that are Asterisk. This will cause them to not pick random ports outbound. </div><div class=""><br class=""></div><div class="">I am not sure what iax2 show registry does, but I could not get it to work until I put in a static NAT outbound.</div><div class=""><br class=""></div><div class="">Here is a copy of my outbound NAT statement for one of my nodes:</div><div class=""><br class=""></div><div class=""></div><div class=""><br class=""></div><div class="">I believe the key is the last YES, which is the STATIC PORT heading.</div><div class=""><br class=""></div><div class="">Hope that helps,</div><div class="">Mike</div><div class="">kb8zgl</div><div class=""><br class=""></div><div class=""><br class=""></div><span id="OLK_SRC_BODY_SECTION" class=""><div style="font-family: Calibri; font-size: 11pt; text-align: left; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);" class=""><span style="font-weight:bold" class="">From: </span> Tim Sawyer <<a href="mailto:tim.sawyer@mac.com" class="">tim.sawyer@mac.com</a>><br class=""><span style="font-weight:bold" class="">Date: </span> Friday, August 22, 2014 at 10:52 AM<br class=""><span style="font-weight:bold" class="">To: </span> "<a href="mailto:app_rpt-users@ohnosec.org" class="">app_rpt-users@ohnosec.org</a>" <<a href="mailto:app_rpt-users@ohnosec.org" class="">app_rpt-users@ohnosec.org</a>><br class=""><span style="font-weight:bold" class="">Subject: </span> [App_rpt-users] pfsense router?<br class=""></div><div class=""><br class=""></div><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><span style="font-size: 14px;" class="">Is anyone using a pfsense router in your Asterisk network? While app_rpt seems to work fine it shows a weird port, not 4569, with “iax2 show registry”. I assume pfsense is doing something weird with NAT that I don’t understand. Can anyone shed some light on this subject?</span><div class=""><br class=""></div><br class=""><br class=""><div class=""><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; border-spacing: 0px;"><div class="">--</div><div class="">Tim WD6AWP</div></span></div></div></div><br></span></div></div></blockquote></div></div></div></blockquote></div></div></body></html>