PJSIP with AST18 & FPBX dropping calls @ 32secs

Hi all,

I’ve had inbound dropped calls at 32 seconds and tried everything in the forums to no avail.

There is no firewall active, no SIP ALG enabled.
PJSIP Log is as follows:

Any help/feedback is welcomed and appreciated!

What are the significances of 174.112.128.30 and 208.65.240.44. You are claiming the former is your address in your response, but the caller seems to think your address is the latter. The caller is unable to reach you (with the ACK), using the former, so Asterisk gives up after too many attempts to send OK.

What is your actual public address?

174.112.128.30 is my public IP at the time of the pastebin, 208.65.240.44 is my VoIP providers server

In that case, the provide is sending the wrong address in the INVITE. Asterisk would be within its rights to forward the INVITE back to the provider.

“At this time” suggests you have an unstable IP address. Apparently there are some countries where it is impossible to get reasonable quality internet services, but unstable addresses are really bad when running servers, and Asterisk receiving a call is a server. (The expectation is that renewing a dynamic address will not change the address, although serious business users should probably use static addresses.)

Could the address have changed between when Asterisk last looked it up and the provider sent the ACKs?

Given I can’t rely on the INVITE for the address to which the provider sent, if Asterisk’s address hasn’t been undermined, is port 5060 the correct port on the public side of the router, to contact Asterisk?

My public IP is static.

It could well be that your OK is getting lost. You will have to trace it through the network. Unfortunately, they have a long chain of proxies, and any of them could have lost it. The fact that they don’t send a URI with your machine’s domain name does not bode well for the integrity of their system.

Are you registering, or is everything being done by IP address?

I’m able to register with the provider, and I also have an Obi202 that works fine on the same network without the ACK/32 second issue.

You’ll need to get a trace from the Obi202, to see how it differs in the way it handles the incorrect Route/Request URI. The only questionable action I can see in Asterisk is that is accepting a URI that doesn’t belong to it, and a Route header that should have been stripped by the immediate upstream proxy.

See the last paragraph of RFC 3261: SIP: Session Initiation Protocol 208.65.240.44 should have removed the Route header listing its URI. Actually it is more than should have. It is a MUST condition in the specification, so it was in direct violation, not just doing something that is discouraged.

Asterisk does seem to have inferred a Record-Route header for 208.65.240.44, but that is probably in response to the garbage in.

I suspect the difference with the Obi is that it users a partial implementation of SIP, which can never act as a proxy, so doesn’t look for Route headers, whereas chan_pjsip is based on a much fuller implementation, which is getting confused by the bogus Route header, and sending a Record-Route header that confuses the provider.

Rather more speculatively, I think the Asterisk part of it may be interpreting all addresses in Route headers and Request URIs as its own address (it typically doesn’t care about the domain in request URIs. As a result it is forwarding it to itself and getting very confused. The resulting Record-Route from that internal forward is confusing the provider, as their last proxy doesn’t expect to be kept in the final route. Again, this paragraph is very speculative.

If the speculation is correct, the fix may be to treat the address in the Route header as a genuine next hop, and send the INVITE back, which may still break things for you.

Could my ISP (Rogers) be rewriting/messing with the R/R header, or interfering with the ACK?

SIP ALG (application level gateways) in routers (which might have been supplied by the provider) are more common cause of mangled SIP, but anything is possible.

As I mentioned, I have extensively tested and can confirm that the SIP ALG is disabled so that rules that out.
Might my firewall rules be in the way? I didn’t see it interfering in the log I pasted.
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all – 169.60.141.30 0.0.0.0/0
ACCEPT all – 169.60.141.29 0.0.0.0/0
ACCEPT all – 119.81.44.7 0.0.0.0/0
ACCEPT all – 119.81.44.6 0.0.0.0/0
ACCEPT all – 5.10.112.122 0.0.0.0/0
ACCEPT all – 5.10.112.121 0.0.0.0/0
ACCEPT all – 169.63.86.0/24 0.0.0.0/0
ACCEPT all – 168.100.81.10 0.0.0.0/0
ACCEPT all – 168.100.80.10 0.0.0.0/0
ACCEPT all – 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp – 0.0.0.0/0 0.0.0.0/0 tcp flags:0x10/0x10
ACCEPT all – 0.0.0.0/0 0.0.0.0/0 state ESTABLISHED
ACCEPT all – 0.0.0.0/0 0.0.0.0/0 state RELATED
ACCEPT all – 127.0.0.0/8 0.0.0.0/0
ACCEPT all – 10.8.0.0/24 0.0.0.0/0
ACCEPT all – 192.168.0.0/16 0.0.0.0/0
ACCEPT all – 172.16.0.0/12 0.0.0.0/0
ACCEPT udp – 0.0.0.0/0 0.0.0.0/0 udp spt:53 dpts:9999:65535
ACCEPT icmp – 0.0.0.0/0 0.0.0.0/0 icmptype 0
ACCEPT icmp – 0.0.0.0/0 0.0.0.0/0 icmptype 3
ACCEPT icmp – 0.0.0.0/0 0.0.0.0/0 icmptype 4
ACCEPT icmp – 0.0.0.0/0 0.0.0.0/0 icmptype 11
ACCEPT icmp – 0.0.0.0/0 0.0.0.0/0 icmptype 12
ACCEPT tcp – 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
ACCEPT tcp – 0.0.0.0/0 0.0.0.0/0 tcp dpt:1723
ACCEPT tcp – 0.0.0.0/0 0.0.0.0/0 tcp dpt:2267
ACCEPT udp – 0.0.0.0/0 0.0.0.0/0 udp dpt:4569
ACCEPT udp – 0.0.0.0/0 0.0.0.0/0 udp dpts:10000:20000
ACCEPT tcp – 0.0.0.0/0 0.0.0.0/0 tcp dpt:32976
ACCEPT tcp – 0.0.0.0/0 0.0.0.0/0 tcp dpt:4445
ACCEPT udp – 0.0.0.0/0 0.0.0.0/0 udp dpt:123
ACCEPT udp – 0.0.0.0/0 0.0.0.0/0 udp dpt:5353
ACCEPT tcp – 0.0.0.0/0 0.0.0.0/0 tcp dpt:8000
ACCEPT udp – 0.0.0.0/0 0.0.0.0/0 udp dpts:8001:8003
ACCEPT all – 192.168.2.195 0.0.0.0/0
ACCEPT all – 192.168.2.58 0.0.0.0/0
ACCEPT all – 174.112.128.30 0.0.0.0/0
ACCEPT udp – 199.87.144.0/21 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 204.11.192.0/22 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 35.85.225.96/27 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 3.101.177.224/27 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 3.99.65.224/27 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 44.199.94.192/27 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 3.144.141.64/27 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 35.215.45.65 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 35.209.126.210 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 35.212.222.157 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 64.2.142.215 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.216 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.9 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.17 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.18 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.29 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.87 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.106 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.107 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.109 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.111 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.187 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.188 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.189 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.190 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.214 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.2.142.26 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 199.101.184.146 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 174.34.146.162 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 173.208.83.50 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 74.54.54.178 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 209.62.1.2 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 67.215.241.250 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 74.63.41.218 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 69.147.236.82 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 68.233.226.97 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 67.205.74.184 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 67.205.74.187 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 174.137.63.206 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 174.137.63.202 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 5.77.36.136 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 204.11.192.32/30 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 204.155.28.10 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.136.174.24 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.136.174.24 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.34.181.47 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 69.90.174.98 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 85.17.186.7 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069
ACCEPT udp – 81.23.228.129 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069
ACCEPT udp – 67.228.182.2 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069
ACCEPT udp – 64.251.23.244 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 85.17.148.32 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 63.211.239.14 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 63.247.78.218 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 8.3.252.23 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 8.14.120.23 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 8.17.37.23 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 66.54.140.46 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 66.54.140.47 0.0.0.0/0 multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569
ACCEPT udp – 64.62.236.143 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 24.211.64.206 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 199.30.56.194 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 209.216.15.70 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 209.216.2.211 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 184.154.97.11 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 81.23.228.150 0.0.0.0/0 udp dpts:5060:5069
ACCEPT tcp – 81.23.228.150 0.0.0.0/0 tcp dpts:5060:5069
ACCEPT udp – 65.254.44.194 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 74.81.71.18 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 169.48.232.158 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 67.212.84.21 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 176.9.39.206 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 72.9.149.25 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 8.8.8.8 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 98.254.157.185 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 178.63.143.236 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 98.254.157.185 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 64.2.142.26 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 216.66.23.179 0.0.0.0/0 udp dpts:5060:5069
ACCEPT all – 35.156.192.164 0.0.0.0/0
ACCEPT all – 50.17.48.216 0.0.0.0/0
ACCEPT all – 52.60.138.31 0.0.0.0/0
ACCEPT all – 52.8.201.128 0.0.0.0/0
ACCEPT all – 52.41.52.34 0.0.0.0/0
ACCEPT udp – 38.130.255.68 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 69.85.136.128 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 38.130.255.68 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 173.246.36.196 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 207.239.159.171 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 199.255.157.198 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 162.249.171.198 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 69.12.88.198 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 76.8.29.198 0.0.0.0/0 udp dpts:5060:5069
ACCEPT all – 216.147.3.2 0.0.0.0/0
ACCEPT all – 216.147.3.1 0.0.0.0/0
ACCEPT all – 178.128.235.81 0.0.0.0/0
ACCEPT all – 198.13.56.186 0.0.0.0/0
ACCEPT all – 139.59.34.94 0.0.0.0/0
ACCEPT all – 157.175.131.128 0.0.0.0/0
ACCEPT all – 13.245.35.235 0.0.0.0/0
ACCEPT all – 165.232.186.228 0.0.0.0/0
ACCEPT all – 108.61.169.31 0.0.0.0/0
ACCEPT all – 159.65.244.171 0.0.0.0/0
ACCEPT all – 104.248.176.184 0.0.0.0/0
ACCEPT all – 170.64.128.96 0.0.0.0/0
ACCEPT all – 137.184.4.155 0.0.0.0/0
ACCEPT all – 188.166.126.7 0.0.0.0/0
ACCEPT all – 104.248.150.114 0.0.0.0/0
ACCEPT all – 167.99.198.84 0.0.0.0/0
ACCEPT all – 167.99.198.84 0.0.0.0/0
ACCEPT all – 104.248.176.184 0.0.0.0/0
ACCEPT all – 159.65.244.171 0.0.0.0/0
ACCEPT all – 188.166.126.7 0.0.0.0/0
ACCEPT all – 104.248.150.114 0.0.0.0/0
ACCEPT all – 178.128.235.81 0.0.0.0/0
ACCEPT all – 159.65.244.171 0.0.0.0/0
ACCEPT udp – 107.170.65.67 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 107.170.123.70 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 107.170.151.176 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 159.65.186.176 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 159.65.251.173 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 159.65.252.186 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 159.65.253.49 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 162.243.35.55 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 162.243.66.221 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 162.243.226.67 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 162.243.226.164 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 165.227.184.188 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 167.99.48.91 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 167.99.119.203 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 167.99.119.244 0.0.0.0/0 udp dpts:5060:5069
ACCEPT udp – 192.241.179.113 0.0.0.0/0 udp dpts:5060:5069

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.