|
Home > Archive > Voice Over IP in UK > February 2006 > ATA behind Vigor router - incoming fine, no outgoing calls
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
ATA behind Vigor router - incoming fine, no outgoing calls
|
|
|
| Hi
My friends have a Sipura SPA-2000 ATA behind their Vigor [non-voip model]
internet router.
We think we have set up port forwarding fine. The ATA registers and accepts
incoming calls fine [rings, two-way conversation] but no outgoing dialling
is possible. There is a short [5 sec?] dial tone but nothing happens when
dialled. They are using Voipfone, as am I, and they cannot even call me
within the voipfone network.
I see this condition asked about a couple of times on the Draytek forum but
not answered.
What have we missed? Any ideas of things to look at?
Cheers
L
| |
|
| me@privacy.net declared for all the world to hear...
> Hi
>
> My friends have a Sipura SPA-2000 ATA behind their Vigor [non-voip model]
> internet router.
>
> We think we have set up port forwarding fine. The ATA registers and accepts
> incoming calls fine [rings, two-way conversation] but no outgoing dialling
> is possible. There is a short [5 sec?] dial tone but nothing happens when
> dialled. They are using Voipfone, as am I, and they cannot even call me
> within the voipfone network.
>
> I see this condition asked about a couple of times on the Draytek forum but
> not answered.
>
> What have we missed? Any ideas of things to look at?
Put the ATA in the DMZ?
--
Regards
Jon
| |
| TheDragon 2006-01-27, 8:46 pm |
|
"Jon" <spam@jonparker.plus.com> wrote in message
news:MPG.1e42001f2261cc83989e9c@usenet.plus.net...
> me@privacy.net declared for all the world to hear...
>
> Put the ATA in the DMZ?
> --
> Regards
> Jon
No never. too dangerous. find all used ports and do it properly
| |
|
| Respond_To_News_only@gmail.com declared for all the world to hear...
> No never. too dangerous.
Why? What's going to happen to it? My ATA is the DMZ.
--
Regards
Jon
| |
| TheDragon 2006-01-27, 8:47 pm |
|
"Jon" <spam@jonparker.plus.com> wrote in message
news:MPG.1e435dd36d0c2ff989ea5@usenet.plus.net...
> Respond_To_News_only@gmail.com declared for all the world to hear...
>
> Why? What's going to happen to it? My ATA is the DMZ.
> --
> Regards
> Jon
There are numerous attacks that can be carried out on ATA devices. Some will
resist, some not. The cisco ATA186 has a known flaw in older software. I am
maybe being to security conscious, but I refuse to open ports that don't
need opening. Placing a device in the DMZ is the ultimate sin, as there is
nothing between the big bad world and the device.
| |
| Thomas Sandford 2006-01-27, 8:47 pm |
|
"TheDragon" <Respond_To_News_only@gmail.com> wrote in message
news:43u3aoF1p7ditU1@individual.net...
>
> "Jon" <spam@jonparker.plus.com> wrote in message
> news:MPG.1e435dd36d0c2ff989ea5@usenet.plus.net...
> There are numerous attacks that can be carried out on ATA devices. Some
> will resist, some not. The cisco ATA186 has a known flaw in older
> software. I am maybe being to security conscious, but I refuse to open
> ports that don't need opening. Placing a device in the DMZ is the ultimate
> sin, as there is nothing between the big bad world and the device.
You appear to have a different definition of the DMZ from that I (and I
suspect Jon) use.
A DMZ _is_ behind a firewall, which has the appropriate holes punched
through for (intended) communication with the devices living within it.
For example, my ATA lives in a DMZ and the following access to that IP is
allowed by the firewall:
UDP to/from any local port from anywhere [actually broader than required but
liveable with for me].
TCP to/from local port 5060 from anywhere [allows TCP SIP, though I've never
actually seen it].
TCP to/from local port 80 from internal network only [to allow me to
configure the device].
Attacks on the ATA can therefore only be made from
1) a UDP vector.
2) My internal network.
3) within the DMZ itself.
In writing this post I decided that there was a small posibility of a SNMP
attack vector so I've just closed those ports...
--
Thomas Sandford
| |
|
|
"Lee" <me@privacy.net> wrote in message
news:43p4uaF1ocguhU1@individual.net...
> Hi
>
> My friends have a Sipura SPA-2000 ATA behind their Vigor [non-voip model]
> internet router.
>
> We think we have set up port forwarding fine. The ATA registers and
> accepts incoming calls fine [rings, two-way conversation] but no outgoing
> dialling is possible. There is a short [5 sec?] dial tone but nothing
> happens when dialled. They are using Voipfone, as am I, and they cannot
> even call me within the voipfone network.
>
> I see this condition asked about a couple of times on the Draytek forum
> but not answered.
>
> What have we missed? Any ideas of things to look at?
>
> Cheers
>
For the benefit of Googlers who come across this thread - the answer was
here:
http://www.dslreports.com/forum/remark,14318615
| |
|
|
"TheDragon" <Respond_To_News_only@gmail.com> wrote in message
news:43seinF1p3pfrU1@individual.net...
>
> "Jon" <spam@jonparker.plus.com> wrote in message
> news:MPG.1e42001f2261cc83989e9c@usenet.plus.net...
>
> No never. too dangerous. find all used ports and do it properly
Hello
I have tried for a couple of weekends now to get this working - opening a
variety of "Open Ports" on the Draytek. In a moment of frustration, I did
put the Sipura ATA into the DMZ as suggested above and the box *still*
cannot make outgoing calls. Even dialling the voipfone 155 "test" number
fails.
I should perhaps point out that there is no separate DMZ port on the
Draytek, I just used the "DMZ" config form within the router. I do not know
if this creates a "true" DMZ or simulates one...
The DTMF Tx Method setting is on "INFO" though we have tried "Auto" and
"Inband" too.
The box worked fine in my house when plugged into my network behind an IPCOP
firewall. The only difference is that my house has regular ADSL whereas my
friends are on Blueyonder. Does anyone know if there is perhaps a known
issue with BY and Voip?
I would welcome any other ideas the group may have.
L
| |
|
|
"Lee" <me@privacy.net> wrote in message news:447n4hFqnlfU1@individual.net...
>
> "Lee" <me@privacy.net> wrote in message
> news:43p4uaF1ocguhU1@individual.net...
>
> For the benefit of Googlers who come across this thread - the answer was
> here:
> http://www.dslreports.com/forum/remark,14318615
>
>
Actually this wasn't the solution. Sorry Googlers - this problem is still
wide open and all help appreciated.
| |
|
| Lee wrote:
> I have tried for a couple of weekends now to get this working - opening a
> variety of "Open Ports" on the Draytek. In a moment of frustration, I did
> put the Sipura ATA into the DMZ as suggested above and the box *still*
> cannot make outgoing calls. Even dialling the voipfone 155 "test" number
> fails.
>
> I should perhaps point out that there is no separate DMZ port on the
> Draytek, I just used the "DMZ" config form within the router. I do not
> know if this creates a "true" DMZ or simulates one...
Well it was always worth a shot! Could be handy to put a PC with softphone
SIP client on in place of the ATA, and see if you can get any more verbose
error information.
> The DTMF Tx Method setting is on "INFO" though we have tried "Auto" and
> "Inband" too.
This shouldn't affect your ability to make calls, only the passing of DTMF
once a call is set up.
> The box worked fine in my house when plugged into my network behind an
> IPCOP firewall. The only difference is that my house has regular ADSL
> whereas my friends are on Blueyonder. Does anyone know if there is perhaps
> a known issue with BY and Voip?
I use Sipgate on a BY connection. To be honest, I rarely make phone calls
with it; I tried calling a company yesterday to pay a bill over the phone,
and it was rubbish. I made 5 attempts in 15 minutes, and the longest call
lasted 80 seconds, before the call dropped. In the end I gave up and used
my mobile. Later on, my girlfriend received a garbled call from a landline,
she tried to return the call and the audio dropped out after 30 seconds.
It's not a bandwidth issue, as I'm on 10mbit. Monitoring the connection
with IPTraf, and apart from the customary ARP traffic and port 25
connection attempts from all and sundry, it's just my traffic to/from
Sipgate.
To be honest I'm not that bothered at the moment as I still have the BT
landline, and contract mobile with all the free minutes I can eat. I guess
I'll look into it at some point.
> I would welcome any other ideas the group may have.
Let's get this clear - are you connecting with DSL or Cable? If cable, it
makes things simpler, as you'll be presented with an ethernet connection to
the net, so you can eliminate the router from the equation by connecting
the ATA straight to the Cable Modem. Rumours of Drayteks being shit with
VoIP abound, however I don't have one so I can't comment either way.
--
<http://ale.cx/> (AIM:troffasky) (gebssnfxl@ubgznvy.pbz)
20:47:00 up 19 days, 1:05, 3 users, load average: 1.02, 1.07, 1.07
This is my BOOOOOOOOOOOOOOOOOOOOOMSTICK
| |
|
| alexd formulated the question :
<snip>
> Rumours of Drayteks being shit with
> VoIP abound, however I don't have one so I can't comment either way.
I was looking at buying one to replace a slightly lacking cheepo
router. However, trying to get a single supplier, or the manufacturer
to confirm whether it could handle SIP traffic was an impossibility. In
the end, I plumped for the Linksys WRT54G & stuck the DD-WRT(Voip)
firmware on & it works like a charm.
| |
|
|
"alexd" <look@my.sig> wrote in message news:1636854.XaQseAGUvi@ale.cx...
>
> Let's get this clear - are you connecting with DSL or Cable? If cable, it
> makes things simpler, as you'll be presented with an ethernet connection
> to
> the net, so you can eliminate the router from the equation by connecting
> the ATA straight to the Cable Modem. Rumours of Drayteks being shit with
> VoIP abound, however I don't have one so I can't comment either way.
D'oh! I will suggest connecting the ATA to the Cable modem and see what
happens! Wood/trees syndrome strikes again!
Many thanks for such a simple suggestion.
L
| |
|
| Jono wrote:
> alexd formulated the question :
> <snip>
>
> I was looking at buying one to replace a slightly lacking cheepo
> router. However, trying to get a single supplier, or the manufacturer
> to confirm whether it could handle SIP traffic was an impossibility. In
> the end, I plumped for the Linksys WRT54G & stuck the DD-WRT(Voip)
> firmware on & it works like a charm.
To be honest, if I was a kit vendor, I wouldn't like to confirm whether or
not $KIT works with $BUZZWORD unless I was absolutely sure from first hand
experience - just imagine how pissed off you'd be if you were told it would
work, and it doesn't.
There's some commonly referenced statistic about an unhappy customer telling
10 people, and a happy customer telling one, so to me, that explains your
experience with Draytek vendors.
--
<http://ale.cx/> (AIM:troffasky) (gebssnfxl@ubgznvy.pbz)
21:47:04 up 20 days, 2:05, 2 users, load average: 0.06, 0.09, 0.14
This is my BOOOOOOOOOOOOOOOOOOOOOMSTICK
| |
|
| alexd pretended :
> Jono wrote:
>
>
> To be honest, if I was a kit vendor, I wouldn't like to confirm whether or
> not $KIT works with $BUZZWORD unless I was absolutely sure from first hand
> experience - just imagine how pissed off you'd be if you were told it would
> work, and it doesn't.
>
> There's some commonly referenced statistic about an unhappy customer telling
> 10 people, and a happy customer telling one, so to me, that explains your
> experience with Draytek vendors.
I wouldn't be annoyed at all as they would be obliged to refund the
purchase.......I rather suspect that that was the reason.
| |
| james@sheerin.net 2006-02-14, 8:47 pm |
| I use a SPA 2000 connecting to Sipggate behind a belkin router at home
on BY without problems (well that's not quite true: I have two
different phones connected and I have problems if both are in use at
the same time, but I think that's only to be expected). I also have a
Vigor 2600v (with built in phone adapter) which I used at my office. I
didn't find this very reliable and ended up using it connnected via the
ethernet ports to a Snom 360. This was very reliable once I had
forwarded all the right ports. The office connnection was with
Gradwell who have one of the best support sites avaiilable - look at
their "knowledgebase"
http://esupport.gradwell.net/index....=9&pcid=0&nav=0
I suspect that it must be a port forwarding issue. The ports need to
be open and forwarded to the SPA 2000. I am a bit vague on networking
issues but always use fixed internal IP addresses to make things
easier. I don't know if Voipfone use a Stun server for NAT traversal,
but I have found this essential on any router. If they don't it may be
worthwhile trying a vopi provider who does.
I hope you manage to sort this. I doubt the problem is with BY.
| |
|
|
<james@sheerin.net> wrote in message
news:1139962268.789532.309550@g44g2000cwa.googlegroups.com...
>I use a SPA 2000 connecting to Sipggate behind a belkin router at home
> on BY without problems (well that's not quite true: I have two
> different phones connected and I have problems if both are in use at
> the same time, but I think that's only to be expected). I also have a
> Vigor 2600v (with built in phone adapter) which I used at my office. I
> didn't find this very reliable and ended up using it connnected via the
> ethernet ports to a Snom 360. This was very reliable once I had
> forwarded all the right ports. The office connnection was with
> Gradwell who have one of the best support sites avaiilable - look at
> their "knowledgebase"
> http://esupport.gradwell.net/index....=9&pcid=0&nav=0
>
>
> I suspect that it must be a port forwarding issue. The ports need to
> be open and forwarded to the SPA 2000. I am a bit vague on networking
> issues but always use fixed internal IP addresses to make things
> easier. I don't know if Voipfone use a Stun server for NAT traversal,
> but I have found this essential on any router. If they don't it may be
> worthwhile trying a vopi provider who does.
>
> I hope you manage to sort this. I doubt the problem is with BY.
>
Thanks. I appreciate the help and will look at the Gradwell info.
L
|
|
|
|
|