Carrier Unreachable

[iboam]

Im testing Vicibox 7 @ home behind a Comcast Modem/Router XFINITY ARRIS Touchstone TG862G/CT

What port should be open for inbound and outbound calls, i have 5060, 10000:20000 but when i test there are not open
Im using two sip trunk providers, setting are right, and working in other server. Im able to ping trunks without problem
There is any particular settings on vicibox firewall or modem firewall ?

[williamconley]

Im testing Vicibox 7 @ home behind a Comcast Modem/Router XFINITY ARRIS Touchstone TG862G/CT

Where to start. Hm.

I know!

While you DID mention Vicibox 7 (in passing), you left off the rest so I'll give you this for starters, LOL:

1) Welcome to the Party!

2) As you are obviously new here, I have some suggestions to help us all help you:

When you post, please post your entire configuration including (but not limited to) your installation method and vicidial version with build.

This IS a requirement for posting along with reading the stickies (at the top of each forum) and the manager's manual (available on EFLO.net, both free and paid versions)

You should also post: Asterisk version, telephony hardware (model number is helpful here), cluster information if you have one, and whether any other software is installed in the box. If your installation method is "from scratch" you must post your operating system and should also post the .iso version from which you installed your original operating system. If your installation is "Hosted" list the site name of the host.

If this is a "Cloud" or "Virtual" server, please note the technology involved along with the version of that techology (ie: VMware Server Version 2.0.2). If it is not, merely stating the Motherboard model # and CPU would be helpful.

Similar to This:

Vicibox X.X from .iso | Vicidial X.X.X-XXX Build XXXXXX-XXXX | Asterisk X.X.X | Single Server | No Digium/Sangoma Hardware | No Extra Software After Installation | Intel DG35EC | Core2Quad Q6600

3)

What port should be open for inbound and outbound calls

Inbound: If you are using registration, you do not need an open port. IP-based: UDP 5060, 10000-25000

4)

but when i test there are not open

How did you test? since you are inside the firewall, this is an interesting statement, you should always state how you tested the port condition.

5)

Im using two sip trunk providers, setting are right, and working in other server

If the other server is in the same location, you can not have ports open to two different servers simultaneously. If the other server is at a different location, then you should be ok ... but does the other location have the same network situation? Or does the other server have a Public IP?

5)

. Im able to ping trunks without problem

Please describe how you "ping a trunk". If you mean you can ping the server at the carrier's domain name, that's not the same as verifying that they will accept your SIP traffic. The sip configuration setting "qualify" is meant for that. And if the result of qualify in "sip show peers" is UNREACHABLE, then the answer is that the packet never returns to the Vicidial server. Either they are rejecting or you have a networking problem. Or both.

5)

There is any particular settings on vicibox firewall or modem firewall ?

Turn off the Vicidial firewall for testing. That removes the possibility of that firewall being in the way (don't leave it off for more than a few minutes, of course). And the router firewall should not block outbound calls, inbound calls require registration or port 5060 to be routed to the vicidial server.

6) Note that Double NAT is not supported by asterisk. If both you and the carrier are behind a firewall, your router must have special configuration options to allow SIP traffic successfully. Sometimes it works, sometimes "not so much". Often putting the server in the DMZ of the router is a good test to see if it will be possible at all. Then the Vicibox firewall comes in very handy. But worry about that after you have successful calling inbound and out.

7) I do not see Asterisk CLI information, nor do I see carrier configuration. Thus all this advice is "general".

Happy Hunting!

[iboam]

In the router i forward 5060, 10000:20000, 80 and 22 to the server ip, but when i test open port with www.canyouseeme.org, when i access to my internet ip from external i'm able to login to the server. Servers are not in the same location, one is in my office and this one is in my house. i tried to ping the ip of the trunk and everything is ok

ViciBox_v.7.x86_64-7.0.0 | Vicidial 2.12-538a Build 160122-1401 | Asterisk 11 | Single Server | Intel Core i7-3770 8GB-RAM | 1TB Hard Drive

[iboam]

Ok i just forwarded ports 5060, 10000:20000, 80 and 22 to the server ip, i just test opened ports with http://www.canyouseeme.org and says

Error: I could not see your service my public ip on port (5060)

.

My sip provider IP Address Whitelist:
Signaling IPs Port 5060 (UDP/TCP), 5061 (TLS)
Media IPsPort Range 10000 to 20000

I'm able to access from my phone to public -> server, port 80 is open. Servers are not in the same location, one is in my office and this one is in my house behind a router
I can ping the ip of the trunk and everything is ok.
Router Firewall is disabled

Vicidial
Firewall Configuration Interface External Zone
Firewall Configuration Allowed Services for selected Zone: External Zone
Services Allowed: HTTP Server, HTTPS Server, Secure Shell Server, UDP Ports 4569, 5060, 10000:20000

Code: Select all

[Mar  6 01:25:00]   == Using SIP RTP CoS mark 5
[Mar  6 01:25:00]     -- Executing [917863251053@default:1] AGI("SIP/5000-00000000", "agi://127.0.0.1:4577/call_log") in new stack
[Mar  6 01:25:00]     -- <SIP/5000-00000000>AGI Script agi://127.0.0.1:4577/call_log completed, returning 0
[Mar  6 01:25:00]     -- Executing [917863251053@default:2] Dial("SIP/5000-00000000", "SIP/TwilioProvider/+17863251053,,To") in new stack
[Mar  6 01:25:00] WARNING[12514][C-00000366]: app_dial.c:2437 dial_exec_full: Unable to create channel of type 'SIP' (cause 20 - Subscriber absent)
[Mar  6 01:25:00]   == Everyone is busy/congested at this time (1:0/0/1)
[Mar  6 01:25:00]     -- Executing [917863251053@default:3] Hangup("SIP/5000-00000000", "") in new stack
[Mar  6 01:25:00]   == Spawn extension (default, 917863251053, 3) exited non-zero on 'SIP/5000-00000000'
[Mar  6 01:25:00]     -- Executing [h@default:1] AGI("SIP/5000-00000000", "agi://127.0.0.1:4577/call_log--HVcauses--PRI-----NODEBUG-----20-----CHANUNAVAIL----------") in new stack
[Mar  6 01:25:00]     -- <SIP/5000-00000000>AGI Script agi://127.0.0.1:4577/call_log--HVcauses--PRI-----NODEBUG-----20-----CHANUNAVAIL---------- completed, returning 0


My Sip Settings are

sp trunk does not require registration

Code: Select all

[TwilioProvider]
type=peer
secret=xxxx
username=xxxx
host=hostedautodialer.pstn.twilio.com
dtmfmode=rfc2833
canreinvite=no
disallow=all
allow=ulaw
insecure=port,invite
fromuser=xxxxxxxxxx
fromdomain=hostedautodialer.pstn.twilio.com

Global string: DIAL9TRUNK = SIP/TwilioProvider

dial plan:

Code: Select all

exten => _9NXXNXXXXXX,1,AGI(agi://127.0.0.1:4577/call_log)
exten => _9NXXNXXXXXX,n,Dial(${DIAL9TRUNK}/+1${EXTEN:1},,tTo)
exten => _9NXXNXXXXXX,n,Hangup

exten => _91NXXNXXXXXX,1,AGI(agi://127.0.0.1:4577/call_log)
exten => _91NXXNXXXXXX,n,Dial(${DIAL9TRUNK}/+1${EXTEN:2},,To)
exten => _91NXXNXXXXXX,n,Hangup

ViciBox_v.7.x86_64-7.0.0 | Vicidial 2.12-538a Build 160122-1401 | Asterisk 11 | Single Server | Intel Core i7-3770 8GB-RAM | 1TB Hard Drive

[Kumba]

You have Comcast. They purposefully mess up SIP on their network unless you buy a business account. Most of our clients fix this issue by using a different ISP.

[williamconley]

I'd think that would be actionable. Vonage service would be interrupted and that's what some people use for 911 calls. Not to mention net-neutrality laws. I've never had someone with sip blockage in the USA as a client, even on Comcast. That being said: I've had a lot of clients with blocked outbound SMTP (you must use The ISP's SMTP to avoid spam generators) and a lot of Plain Crappy Service, but never specifically blocked SIP.

Perhaps the carrier will allow use of port 5061? (Comcast may not be watching all the portholes, LOL)

[iboam]

I was able to make calls but now says carrier unreachable ...