Horstbox Sip Port

justme2014 · 27 Apr 2014

Hallo zusammen,

habe eine Palette von Horstboxen Standard umsonst bekommen, sogar geschenkt sind die noch zu teuer. Diese Boxen machen mich langsam Irree, da einfach vieles nicht sauber läuft.

Aber nun zu meinem grössten Problem:

Horstbox Standard FM 2.09.1 ist als Router Konfiguriert, also externes Modem ist an Lan1 angeschlossen. Internetverbindung läuft, Voip ebenfalls wenn ich es mit SIP Port 5060 Konfiguriere, jetzt kommt das große aber, sobald ich einen anderer Sip Port nutzen will z.B. 5062 meldet sich der SIP Account nicht bei Registrar an.

Habe die selben Voip Einstellungen mittels Linphone gemacht und alles ist besten. (Linphone hinter der Horstbox). Nach meiner Logic sollte es somit, nicht an den iptables in der Horstbox liegen, da es mit Linphone bestens klappt aber wer weis.....

Nichts desto trotz, habe ich mir die iptables ausgeben lassen, hier der Auszug:

Code:

Chain INPUT (policy DROP)
target     prot opt source               destination
IFX_FWD_INPUT_DOS_SCANS  all  --  anywhere             anywhere
IFX_FW_DENY_SERVICES  all  --  anywhere             anywhere
IFX_FW_ACCEPT_SERVICES  all  --  anywhere             anywhere
IFX_FW_DISABLE  all  --  anywhere             anywhere
IFX_FWD_INPUT_DOS  all  --  anywhere             anywhere
IFX_FWD_INPUT_DOS  all  --  anywhere             anywhere
IFX_FW_PACKET_FILTER  all  --  anywhere             anywhere
IFX_FW_ICMP_WAN_RESPONSE  icmp --  anywhere             anywhere
IFX_FW_ICMP  icmp --  anywhere             anywhere
IFX_INPUT_ALGS  all  --  anywhere             anywhere
IFX_FW_ACCEPT_LAN_IF_INPUT  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
IFX_FW_APPS_TO_LAN_INPUT  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             base-address.mcast.net/4
ACCEPT     all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
IFX_FWD_INPUT_DOS_SCANS  all  --  anywhere             anywhere
IFX_FW_DISABLE  all  --  anywhere             anywhere
IFX_FWD_INPUT_DOS  all  --  anywhere             anywhere
IFX_FW_IF_INPUT  all  --  anywhere             anywhere
IFX_FW_PACKET_FILTER  all  --  anywhere             anywhere
IFX_FW_ICMP_FORWARD  icmp --  anywhere             anywhere
IFX_FW_ICMP  icmp --  anywhere             anywhere
IFX_FW_ALGS  all  --  anywhere             anywhere
IFX_FW_DNAT_VS  all  --  anywhere             anywhere
IFX_FW_DNAT_PM  all  --  anywhere             anywhere
IFX_FW_DMZ  all  --  anywhere             anywhere
IFX_FW_ACCEPT_LAN_IF_INPUT  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             base-address.mcast.net/4

Chain OUTPUT (policy DROP)
target     prot opt source               destination
IFX_FW_DISABLE  all  --  anywhere             anywhere
IFX_FW_ACCEPT_LAN_IF_OUTPUT  all  --  anywhere             anywhere
IFX_FW_APPS_TO_LAN_OUTPUT  all  --  anywhere             anywhere
IFX_FW_ACCEPT_WAN_IF_OUTPUT  all  --  anywhere             anywhere
IFX_FW_ICMP_WAN_RESPONSE  icmp --  anywhere             anywhere
IFX_FW_ICMP  icmp --  anywhere             anywhere
IFX_OUTPUT_ALGS  all  --  anywhere             anywhere
IFX_OUTPUT_ALGS  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             base-address.mcast.net/4
ACCEPT     all  --  anywhere             anywhere

Chain IFX_FWD_INPUT_DOS (3 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere
IFX_FWD_INPUT_DOS_IP_HDR  all  --  anywhere             anywhere
IFX_FWD_INPUT_DOS_TCP  tcp  --  anywhere             anywhere
IFX_FWD_INPUT_DOS_UDP  udp  --  anywhere             anywhere

Chain IFX_FWD_INPUT_DOS_IP_HDR (1 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere             IPV4OPTS SSRR
DROP       all  --  anywhere             anywhere             IPV4OPTS LSRR

Chain IFX_FWD_INPUT_DOS_SCANS (2 references)
target     prot opt source               destination
DROP       tcp  --  anywhere             anywhere            limit: avg 40/sec burst 40 tcp flags:FIN,SYN,RST,PSH,ACK,URG/SYN
DROP       all  --  anywhere             anywhere            psd weight-threshold: 30 delay-threshold: 20 lo-ports-weight: 5 hi-ports-weight: 2

Chain IFX_FWD_INPUT_DOS_TCP (1 references)
target     prot opt source               destination
IFX_FWD_INPUT_DOS_TCP_HDR  all  --  anywhere             anywhere
IFX_FWD_INPUT_DOS_TCP_PAYLOAD  all  --  anywhere             anywhere

Chain IFX_FWD_INPUT_DOS_TCP_HDR (1 references)
target     prot opt source               destination
REJECT     tcp  --  anywhere             anywhere            multiport dports 133 tcp flags:URG/URG reject-with tcp-reset
DROP       tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
DROP       tcp  --  anywhere             anywhere            tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
REJECT     tcp  --  anywhere             anywhere            multiport dports 14238 reject-with icmp-port-unreachable
REJECT     tcp  --  anywhere             anywhere            multiport dports 5010 reject-with icmp-port-unreachable

Chain IFX_FWD_INPUT_DOS_TCP_PAYLOAD (1 references)
target     prot opt source               destination
REJECT     tcp  --  anywhere             anywhere            multiport dports 25 ifxattack match malformed_mimereject-with tcp-reset
REJECT     tcp  --  anywhere             anywhere            multiport dports 80 ifxattack match code_redIIreject-with tcp-reset
REJECT     tcp  --  anywhere             anywhere            multiport dports 80 ifxattack match code_redIreject-with tcp-reset
REJECT     tcp  --  anywhere             anywhere            tcp dpt:ftp ifxattack match ftp_portreject-with tcp-reset
REJECT     tcp  --  anywhere             anywhere            multiport dports 80 ifxattack match icq_dosreject-with tcp-reset

Chain IFX_FWD_INPUT_DOS_UDP (1 references)
target     prot opt source               destination
IFX_FWD_INPUT_DOS_UDP_HDR  all  --  anywhere             anywhere

Chain IFX_FWD_INPUT_DOS_UDP_HDR (1 references)
target     prot opt source               destination
DROP       udp  --  anywhere             anywhere            MARK match 0x6cd247 multiport dports 7,9
DROP       udp  --  anywhere             anywhere            multiport dports 7,9 ADDRTYPE match dst-type BROADCAST
DROP       udp  --  anywhere             anywhere            limit: avg 42/sec burst 42 multiport sports 7,9
DROP       udp  --  anywhere             anywhere            ifxattack match udp_bomb

Chain IFX_FW_ACCEPT_LAN_IF_INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain IFX_FW_ACCEPT_LAN_IF_OUTPUT (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain IFX_FW_ACCEPT_LAN_IP_INPUT (0 references)
target     prot opt source               destination
IFX_FW_SERVICES_ACL  all  --  anywhere             localhost

Chain IFX_FW_ACCEPT_LAN_IP_OUTPUT (0 references)
target     prot opt source               destination
ACCEPT     all  --  localhost            anywhere

Chain IFX_FW_ACCEPT_SERVICES (1 references)
target     prot opt source               destination
IFX_FW_SERVICES_ACL  tcp  --  anywhere             anywhere            tcp dpt:80
IFX_FW_SERVICES_ACL  tcp  --  anywhere             anywhere            tcp dpt:telnet
IFX_FW_SERVICES_ACL  tcp  --  anywhere             anywhere            tcp dpt:ssh
IFX_FW_SERVICES_ACL  udp  --  anywhere             anywhere            udp dpt:tftp
IFX_FW_SERVICES_ACL  tcp  --  anywhere             anywhere            tcp dpt:ftp
IFX_FW_SERVICES_ACL  tcp  --  anywhere             anywhere            tcp dpt:8000
IFX_FW_SERVICES_ACL  tcp  --  anywhere             anywhere            tcp dpt:8000
IFX_FW_SERVICES_ACL  udp  --  anywhere             anywhere            udp dpt:161
ACCEPT     udp  --  anywhere             anywhere            udp dpt:520

Chain IFX_FW_ACCEPT_WAN_IF_OUTPUT (1 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain IFX_FW_ACCEPT_WAN_IP_INPUT (0 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             192.168.1.93

Chain IFX_FW_ALGS (1 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            multiport sports 5060 state RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             anywhere            multiport dports 5060
ACCEPT     tcp  --  anywhere             anywhere            multiport dports 1720,1731,1503,389,522
ACCEPT     tcp  --  anywhere             anywhere            multiport sports 1720,1731,1503,389,522
ACCEPT     tcp  --  anywhere             anywhere            multiport dports 554
ACCEPT     tcp  --  anywhere             anywhere            multiport sports 554 state RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             anywhere            udp spt:500 dpt:500
ACCEPT     udp  --  anywhere             anywhere            udp spt:4500 dpt:4500
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            multiport dports ftp
ACCEPT     tcp  --  anywhere             anywhere            multiport sports ftp state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            multiport dports 1723
ACCEPT     tcp  --  anywhere             anywhere            multiport sports 1723 state RELATED,ESTABLISHED
ACCEPT     47   --  anywhere             anywhere            state RELATED,ESTABLISHED

Chain IFX_FW_APPS_TO_LAN_INPUT (1 references)
target     prot opt source               destination

Chain IFX_FW_APPS_TO_LAN_OUTPUT (1 references)
target     prot opt source               destination

Chain IFX_FW_DENY_LAN_IF_INPUT (0 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain IFX_FW_DENY_SERVICES (1 references)
target     prot opt source               destination
IFX_FW_DENY_WAN_IP_INPUT  tcp  --  anywhere             anywhere            tcp dpt:80
IFX_FW_DENY_WAN_IP_INPUT  tcp  --  anywhere             anywhere            tcp dpt:telnet
IFX_FW_DENY_WAN_IP_INPUT  tcp  --  anywhere             anywhere            tcp dpt:ssh
IFX_FW_DENY_WAN_IP_INPUT  udp  --  anywhere             anywhere            udp dpt:tftp
IFX_FW_DENY_WAN_IP_INPUT  tcp  --  anywhere             anywhere            tcp dpt:ftp

Chain IFX_FW_DENY_WAN_IP_INPUT (5 references)
target     prot opt source               destination
DROP       all  --  anywhere             192.168.1.93

Chain IFX_FW_DISABLE (3 references)
target     prot opt source               destination

Chain IFX_FW_DMZ (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain IFX_FW_DNAT_PM (1 references)
target     prot opt source               destination

Chain IFX_FW_DNAT_VS (1 references)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             localhost           tcp dpt:5062
ACCEPT     udp  --  anywhere             localhost           udp dpt:5062

Chain IFX_FW_ICMP (3 references)
target     prot opt source               destination
ACCEPT     icmp --  anywhere             anywhere            icmp echo-reply
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request
ACCEPT     icmp --  anywhere             anywhere            icmp time-exceeded
DROP       icmp --  anywhere             anywhere

Chain IFX_FW_ICMP_FORWARD (1 references)
target     prot opt source               destination

Chain IFX_FW_ICMP_WAN_RESPONSE (2 references)
target     prot opt source               destination

Chain IFX_FW_IF_INPUT (1 references)
target     prot opt source               destination
IFX_FW_LAN_IF_INPUT  all  --  anywhere             anywhere

Chain IFX_FW_LAN_IF_INPUT (1 references)
target     prot opt source               destination
IFX_FW_MAC_FILTER_DROP  all  --  anywhere             anywhere
IFX_FW_MAC_FILTER_PERMIT  all  --  anywhere             anywhere

Chain IFX_FW_MAC_FILTER_DROP (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain IFX_FW_MAC_FILTER_PERMIT (1 references)
target     prot opt source               destination
RETURN     all  --  anywhere             anywhere

Chain IFX_FW_PACKET_FILTER (2 references)
target     prot opt source               destination

Chain IFX_FW_SERVICES_ACL (9 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere

Chain IFX_INPUT_ALGS (1 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            multiport dports 5060
ACCEPT     udp  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            multiport dports ftp

Chain IFX_OUTPUT_ALGS (2 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            multiport dports 5060
ACCEPT     udp  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            multiport sports ftp state ESTABLISHED
#

Das hier ist ja soweitichtig,

Chain IFX_FW_DNAT_VS (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere localhost tcp dpt:5062
ACCEPT udp -- anywhere localhost udp dpt:5062

und das hier verwiirt mich

Chain IFX_FW_ALGS (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere multiport sports 5060 state RELATED,ESTABLISHED
ACCEPT udp -- anywhere anywhere multiport dports 5060

Chain IFX_INPUT_ALGS (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere multiport dports 5060

Chain IFX_OUTPUT_ALGS (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere multiport dports 5060

Sollte bei diesen nicht ebenfalls 5062 stehen?

So dann ging es weiter, im nächsten schritt habe ich mir die rc.conf angesehen und zu meiner Verwunderung, in der GUI kann mann nirgends einen STUN angeben, aber in der rc.conf ist ein STUN als enabled markiert und sogar eine IP + 3478 Port angegeben.

Bis auf dieses Problem, dass ich keinen anderen SIP Port angeben kann, habe ich all meine anderen Probleme gelöst, somit lauft die Box schon mal ganz gut, nach meinen Vorstellungen, nun brauche ich dringend eine Lösung für die SIP Port Umstellung, vor allem weil Sie bei der Standard in der GUI vorhanden ist als Feld.

Wäre sehr Dankbar für Ideen!!

MfG,
Roman

justme2014 · 27 Apr 2014

Hallo nochmals,

habe nun iptables angepasst auf allen Port das es auch 5062 zulässt, aber noch immer das selbe...

confused

Ich habe leider hier keine ADSL Annex B Zugang, leider nur Annex A und diese Box beherrscht das einfach nicht.... Könnte bitte jemand testen ob es mit einem anderen Port als mit 5060 funktioniert wenn man das Modem nutzt..... meine Vermutung liegt darin das es nicht funktioniert wenn man die Horstbox Standard als Router mit externem Modem nutzt.

LG Roman

Horstbox Sip Port

justme2014

Neuer User

justme2014

Neuer User

Neueste Beiträge

Kategorien

Wissenswertes

Statistik des Forums

3CX jetzt einen Monat kostenlos testen

Unternehmen

Lösungen

Nützliche Links

Mehr erfahren