On Static IP Address Soft Phone are not getting register

Hello VOIPGURU,

I have config in my local lan asterisk for test. which is working fine.

With the same OS version and packages on “AWS Cloud” I am setting as following. But it don’t get register “error = sip 408 - request timeout” same I am getting on all Iphone and Androids.

On my cloud all port are open TCP /UDP 1 to 65553

I have done following step to setup my asterisk server.

Kindly suggest us what went wrong with setting.

uname -a
Linux mysip.guggle.co.in 2.6.32-431.3.1.el6.x86_64 #1 SMP Fri Jan 3 21:39:27 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

cat /etc/redhat-release
CentOS release 6.5 (Final)

vi /etc/hosts
209.179.132.XXX sip.guggle.co.in sip —> this is my static IP Address

vi /etc/sysconfig/network
HOSTNAME=guggle.co.in —> FQDN

vi /etc/hostname
guggle.co.in

vi /etc/selinux/config
selinux=disabled
chkconfig iptables off
chkconfig ip6tables off

rpm -ivh ftp.jaist.ac.jp/pub/Linux/Fedora … noarch.rpm
rpm -ivh download1.rpmfusion.org/free/fed … noarch.rpm
rpm -ivh download1.rpmfusion.org/nonfree/ … noarch.rpm

cd /etc/yum.repos.d/ && wget packages.digium.com/centos/centos-digium-12.repo

cd /usr/src/ && wget downloads.asterisk.org/pub/telep … rc1.tar.gz && tar zxvf asterisk-gui-2.1.0-rc1.tar.gz && cd asterisk-gui-2.1.0* && ./configure && make && make install && make checkconfig

cp -Rfv /var/lib/asterisk/* /usr/share/asterisk/ && mv /var/lib/asterisk /var/lib/asterisk_original && ln -s /usr/share/asterisk /var/lib/asterisk

sudo yum install gcc bison flex zlib-devel openssl-devel httpd mysql-server mysql-devel krb5-libs e2fsprogs-devel keyutils-libs-devel krb5-devel libselinux-devel libsepol-devel krb5-workstation mod_dav_svn subversion dahdi-linux dahdi-tools libpri asterisk

chkconfig asterisk on && chkconfig dahdi on && reboot

login as root :

cd /etc/asterisk

vi sip.conf

[raj]
type=friend
host=dynamic
secret=password ; put a strong, unique password here instead
context=users

[pjain]
type=friend
host=dynamic
secret=othersecretpassword ; put a strong, unique password here instead
context=users

[sham]
type=friend
host=dynamic
secret=password ; put a strong, unique password here instead
context=users

vi extension.conf

[users]
exten=>986001,1,Dial(SIP/raj,20)
exten=>986002,1,Dial(SIP/pjain,20)
exten=>986003,1,Dial(SIP/sham,20)

service asterisk restart

asterisk -rvvvvc

sip reload
sip show peers
dialplan reload
dialplan show users
http show status

guggle.co.in

You will have to provide SIP debugs. Do a “sip set debug on”, try registering a SIP phone to your server and copy/paste the output.

If I were you, I would re-consider running the Asterisk server on a public IP with such low security settings.

@ dejanst,

I would re-consider running the Asterisk server on a public IP with such low security settings.

Why do you thing AWS is unsecured ?

Idea to have this on over the public IP people can access that from any where.

pinky

This sentence lead me to believe that:

On my cloud all port are open TCP /UDP 1 to 65553

Running a VoIP server on the internet is not an eazy thing and you definitly need some monitoring softwares that discover a possible hacker trying to run up your phone bill.

My intention was to warn you and to simulate you to discover Asterisk security best practices.