By default pfsense will rewrite the port.
KB8ZGL*CLI> iax2 show registry
Host dnsmgr Username Perceived Refresh State
67.215.233.178:4569 N 28881 24.247.58.57:4569 60 Registered
67.215.233.178:4569 N 28241 24.247.58.57:4569 60 Registered
Mine matches for both of my nodes on that machine, which is behind my PFSense firewall. I am actually accessing it via OpenVPN right now, as the other person stated.
MikeFrom: Tim Sawyer <tim.sawyer@mac.com>
Date: Friday, August 22, 2014 at 11:01 AM
To: Michael Wolthuis <wolthuis@gmail.com>
Cc: "app_rpt-users@ohnosec.org" <app_rpt-users@ohnosec.org>
Subject: Re: [App_rpt-users] pfsense router?Mike,Thanks I’ll try that as soon as the pfsense router gets reinstalled. Just for grins could you do “iax2 show registry”? Is the perceived port correct?*CLI> iax2 show registryHost dnsmgr Username Perceived Refresh State67.215.233.178:4569 N 2504 108.13.3.89:4569 60 Registered--Tim WD6AWPOn Aug 22, 2014, at 7:56 AM, Michael Wolthuis <wolthuis@gmail.com> wrote:_______________________________________________Tim,I run PFSense with many of my Allstar nodes. I have to set STATIC outbound NAT for the specific IP addresses that are Asterisk. This will cause them to not pick random ports outbound.I am not sure what iax2 show registry does, but I could not get it to work until I put in a static NAT outbound.Here is a copy of my outbound NAT statement for one of my nodes:
WAN 172.16.12.22/32 udp/4569 * udp/4569 WAN address * YES I believe the key is the last YES, which is the STATIC PORT heading.Hope that helps,Mikekb8zglFrom: Tim Sawyer <tim.sawyer@mac.com>
Date: Friday, August 22, 2014 at 10:52 AM
To: "app_rpt-users@ohnosec.org" <app_rpt-users@ohnosec.org>
Subject: [App_rpt-users] pfsense router?_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.orghttp://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.Is anyone using a pfsense router in your Asterisk network? While app_rpt seems to work fine it shows a weird port, not 4569, with “iax2 show registry”. I assume pfsense is doing something weird with NAT that I don’t understand. Can anyone shed some light on this subject?--Tim WD6AWP
App_rpt-users mailing list
App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.