Re: [App_rpt-users] Node not registering
From: Doug Bade <kd8b@thebades.net> Date: 2009/10/29 Thu PM 01:53:55 PDT To: app_rpt mailing list <app_rpt-users@qrvc.com> Subject: Re: [App_rpt-users] Node not registering
Do I need a hole in the firewall for the registry??? I have one
for SIP.. 4569
from my iax.conf file
register=A2235:xxxxxx@register.allstarlink.org where xxxxxx = my password....
from my rpt.conf file
statpost_program=/bin/wget,-q,--timeout=15,--tries=1,--output-document=/dev/null
statpost_url=http://stats.allstarlink.org/uhandler.php ; Status updates
is uncommented....
I am not seeing what is wrong..
Help ??
Doug KD8B
There should be a be a forward statement for port 4569 in your firewall directing the external port 4569 on your public IP to an internal private IP hosting the node.
Just to make sure your router is not playing games with source port numbers, I forced registration for node 2235 to always user port 4569.
FYI: Although not needed for ACID, SIP should be port 5060 plus udp ports 10000-20000
Steve WA6ZFT
Steve;
Steve and List;
I did already open up a port forward on 4569 for UDP......... I am suspecting maybe TCP too?????
I will open the others too....
Doug KD8B
_______________________________________________ App_rpt-users mailing list App_rpt-users@qrvc.com http://qrvc.com/mailman/listinfo/app_rpt-users
The udp protocol on port 4569 is all that should be required. Recheck the internal port forwarding in the router, and you might want to see what registration messages(errors) are being printed on the asterisk cli. Steve WA6ZFT
hwstar@rodgers.sdcoxmail.com wrote:
From: Doug Bade <kd8b@thebades.net> Date: 2009/10/29 Thu PM 01:53:55 PDT To: app_rpt mailing list <app_rpt-users@qrvc.com> Subject: Re: [App_rpt-users] Node not registering
Do I need a hole in the firewall for the registry??? I have one
for SIP.. 4569
from my iax.conf file
register=A2235:xxxxxx@register.allstarlink.org where xxxxxx = my password....
from my rpt.conf file
statpost_program=/bin/wget,-q,--timeout=15,--tries=1,--output-document=/dev/null
statpost_url=http://stats.allstarlink.org/uhandler.php ; Status updates
is uncommented....
I am not seeing what is wrong..
Help ??
Doug KD8B
There should be a be a forward statement for port 4569 in your firewall directing the external port 4569 on your public IP to an internal private IP hosting the node.
Just to make sure your router is not playing games with source port numbers, I forced registration for node 2235 to always user port 4569.
FYI: Although not needed for ACID, SIP should be port 5060 plus udp ports 10000-20000
Steve WA6ZFT
Steve;
Steve and List;
I did already open up a port forward on 4569 for UDP......... I am suspecting maybe TCP too?????
I will open the others too....
Doug KD8B
_______________________________________________ App_rpt-users mailing list App_rpt-users@qrvc.com http://qrvc.com/mailman/listinfo/app_rpt-users
The udp protocol on port 4569 is all that should be required. Recheck the internal port forwarding in the router, and you might want to see what registration messages(errors) are being printed on the asterisk cli.
Steve WA6ZFT
Steve;
Thanks for the help.
I had opened it in port forwarding but not in the firewall iptables rules... fixed now :-) Next step to hook up other repeaters through the same firewall... I guess use sequential ports or something for the others???? Doug KD8B
Doug Bade wrote:
hwstar@rodgers.sdcoxmail.com wrote:
From: Doug Bade <kd8b@thebades.net> Date: 2009/10/29 Thu PM 01:53:55 PDT To: app_rpt mailing list <app_rpt-users@qrvc.com> Subject: Re: [App_rpt-users] Node not registering
Do I need a hole in the firewall for the registry??? I have one
for SIP.. 4569
from my iax.conf file
register=A2235:xxxxxx@register.allstarlink.org where xxxxxx = my password....
from my rpt.conf file
statpost_program=/bin/wget,-q,--timeout=15,--tries=1,--output-document=/dev/null
statpost_url=http://stats.allstarlink.org/uhandler.php ; Status updates
is uncommented....
I am not seeing what is wrong..
Help ??
Doug KD8B
There should be a be a forward statement for port 4569 in your firewall directing the external port 4569 on your public IP to an internal private IP hosting the node.
Just to make sure your router is not playing games with source port numbers, I forced registration for node 2235 to always user port 4569.
FYI: Although not needed for ACID, SIP should be port 5060 plus udp ports 10000-20000
Steve WA6ZFT
Steve;
Steve and List;
I did already open up a port forward on 4569 for UDP......... I am suspecting maybe TCP too?????
I will open the others too....
Doug KD8B
_______________________________________________ App_rpt-users mailing list App_rpt-users@qrvc.com http://qrvc.com/mailman/listinfo/app_rpt-users
The udp protocol on port 4569 is all that should be required. Recheck the internal port forwarding in the router, and you might want to see what registration messages(errors) are being printed on the asterisk cli.
Steve WA6ZFT
Steve;
Thanks for the help.
I had opened it in port forwarding but not in the firewall iptables rules... fixed now :-) Next step to hook up other repeaters through the same firewall... I guess use sequential ports or something for the others????
Doug KD8B
_______________________________________________ App_rpt-users mailing list App_rpt-users@qrvc.com http://qrvc.com/mailman/listinfo/app_rpt-users
If all the nodes are on the same PC then no other forwarding statements are required in the firewall/router. The one statement for 4569/udp will serve them all. You will need to add register statements for each node in iax.conf, and optionally statpost statements in rpt.conf. Steve WA6ZFT
_______________________________________________ App_rpt-users mailing list App_rpt-users@qrvc.com http://qrvc.com/mailman/listinfo/app_rpt-users
If all the nodes are on the same PC then no other forwarding statements are required in the firewall/router. The one statement for 4569/udp will serve them all.
You will need to add register statements for each node in iax.conf, and optionally statpost statements in rpt.conf.
Steve WA6ZFT
Excellent... I will be working on this over the weekend.... I appreciate the info...It will be the same computer, just other nodes running from it.. Thanks for the quick help! Doug KD8B
Doug Bade wrote:
_______________________________________________ App_rpt-users mailing list App_rpt-users@qrvc.com http://qrvc.com/mailman/listinfo/app_rpt-users
If all the nodes are on the same PC then no other forwarding statements are required in the firewall/router. The one statement for 4569/udp will serve them all.
You will need to add register statements for each node in iax.conf, and optionally statpost statements in rpt.conf.
Steve WA6ZFT
Excellent... I will be working on this over the weekend.... I appreciate the info...It will be the same computer, just other nodes running from it.. Thanks for the quick help! Doug KD8B
_______________________________________________ App_rpt-users mailing list App_rpt-users@qrvc.com http://qrvc.com/mailman/listinfo/app_rpt-users
Well all is now well. It was a firewall issue. I am using Untangle Firewall /Router and it utilizes a VM for the firewall subsystem which allows for 2 filtering options. One is a complete bypass at the network interface level ( this is what is working now and a true port forward) the other is a rule set through the Firewall with Iptables and a gui to configure it. I was not able to get the firewall ruleset working so the bypass method works.. The bypass makes it faster but the audits in the GUI never see it if it is not a ruleset. Hopefully this may help others if it comes up :-) I may work on the ruleset as I would love to control and monitor bandwidth and such which the gui does... in the long run I would prefer it.. but were up!!!!!! Doug KD8B
participants (3)
-
Doug Bade -
hwstar＠rodgers.sdcoxmail.com -
Stephen Rodgers