D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: modulo on January 13, 2012, 09:17:04 AM

Title: DFL210 - SIP ALG Issue
Post by: modulo on January 13, 2012, 09:17:04 AM
Hey,

We have a DFL-210, working fine for many years.  But we have a problem setting it up for our new VOIP-system. 

The DFL-210 is running firmware 2.27.03.25-14787.  We have a Asterisk server connecting to an external SIP-provider.  We set up our DFL-210, following the example and directions in the manual.  Outgoing calls are working fine.  Incoming calls are forwarded to the Asterisk server, but on a random port in stead of the 5060 port.  When tested without the firewall, calls do arrive on the right port.

Anyone else had this issue?  Is this an ALG issue and is there a way to force the use of port 5060?

Regards,

Lieven
Title: Re: DFL210 - SIP ALG Issue
Post by: danilovav on January 14, 2012, 10:02:16 PM
How you configured SIP?

Manual has an example for your situation
NAT lan/lannet wan/all-nets sip-udp
Allow wan/all-nets core/wan_ip sip-udp
Title: Re: DFL210 - SIP ALG Issue
Post by: modulo on January 16, 2012, 03:49:47 AM
Thanks for your reply.

We did follow the example in the manual.  The NAT and allow rule are configured as you mentioned.

In the sip-upd, we set the destination port to 5060, but this seems to be ignored.
Title: Re: DFL210 - SIP ALG Issue
Post by: juanjo on January 17, 2012, 08:49:37 AM
...........  Incoming calls are forwarded to the Asterisk server, but on a random port in stead of the 5060 port.  .......?


Try

SAT wan-allnets --> core-wanip sip-udp.
ALLOW wan-allnets --> core-wanip sip-udp.


Regards
Title: Re: DFL210 - SIP ALG Issue
Post by: danilovav on January 19, 2012, 05:32:01 PM
In the sip-upd, we set the destination port to 5060, but this seems to be ignored.
Check, maybe you have some IP rule(s), which located before SIP and make it not working

SAT wan-allnets --> core-wanip sip-udp.
ALLOW wan-allnets --> core-wanip sip-udp.
SAT is possible only without ALG