Landline phone with own router on FTTP

[bruce_miranda]

Just got FTTP and everything is working fine off the VF router. Phone lines are plugged into the VF router, VF router's WiFi is switched off. 3rd party Mesh has been switched to Bridge mode and plugged into the VF's ethernet port.

However I am shocked at how feature poor the VF router is. e.g. There are no Parental controls at all. I know I can get rid of the VF router and plug my own Mesh router into the Openreach ONT, but what about the Landline. 

Are there any 3rd party routers in the market that have a telephone socket at the back to allow the home phone to be plugged in? 

[chimpzilla1979]

The source port looks random. 43337.

[chimpzilla1979]

When I run wireshark on the local machine running asterisk I can see it is coming from 5065, but then it looks like the router is changing it for some reason.

[cf996]

---

@chimpzilla1979 wrote:

The source port looks random. 43337.

---

This is likely the issue.

---

@chimpzilla1979 wrote:

I've also forwarded 5065 to the fixed LAN IP address of my asterisk server.. but this shouldn't stop registration should it, just incoming calls?

---

Can you try removing/disabling this forwarding rule and see if it rectifies the issue? Can come back to this later if necessary.

[chimpzilla1979]

---

@cf996 wrote:

---

---

Can you try removing/disabling this forwarding rule and see if it rectifies the issue? Can come back to this later if necessary.

---

I have tried removing the port forwarding and it is still coming from port 43337, so not random. Must be something to do with the NAT on the Draytek router. I've looked through the settings (Vigor2927) and I can't find anything to do with the outbound packets. I'll keep looking online as I image this causes issues with other services.
I've only ever done local packet sniffing before (I do lots of reverse engineering), so this is all very interesting.

[cf996]

---

@chimpzilla1979 wrote:

---

---

I have tried removing the port forwarding and it is still coming from port 43337, so not random. Must be something to do with the NAT on the Draytek router.

---

Were you using "Port redirection" or "Open ports" as described here? You'll need to experiment with these and different options. You may also try looking at different NAT modes, if available. Failing that you could ask Draytek for support.

[chimpzilla1979]

---

@cf996 wrote:

---

You'll need to experiment with these and different options. You may also try looking at different NAT modes, if available. Failing that you could ask Draytek for support.

---

 Thanks for your help. I've gone through those settings and the firewall settings and it's still coming from 43337. I've contacted Draytek who've replied really quickly, so hopefully there's a solution.

[Xjacko]

Good luck  @chimpzilla1979 

[chimpzilla1979]

---

@Xjacko wrote:

Good luck  @chimpzilla1979 

---

So, I've made some progress. To pass get a bidirectional port on the Draytek you have to use "open ports",not port forwarding and not adjusting the firewall .

I did try the "open ports" before, but I wonder if it wasn't working because.....

Vodafone gave me incorrect details the first time I asked for them, I've just asked for them again and the proxy they have given me is:

09a.Z4.bbvoice.vodafone.co.uk (they said it was 091.Z4 on the previous contact with them.)

I've checked all my other details and they seem fine.

With this and the port open, I do now get a response from their server. However, it's an error "500 Internal server error".

At least it is responding now.

[cf996]

If possible, can you share the packet sequence observed and the text portion of the packets from wireshark, with your username, IP and MD5s omitted? Just the text beside the hexadecimal is fine. Assume you confirmed the username and password?

Do you have SIP ALG enabled or disabled on the Draytek? If enabled, you may be able to omit the external_signaling_address and external_media_address options.

[chimpzilla1979]

---

@cf996 wrote:

If possible, can you share the packet sequence observed and the text portion of the packets from wireshark, with your username, IP and MD5s omitted? Just the text beside the hexadecimal is fine. Assume you confirmed the username and password?

Do you have SIP ALG enabled or disabled on the Draytek? If enabled, you may be able to omit the external_signaling_address and external_media_address options.

---

The username and password are the same as they gave me last time, the only thing that was wrong was the proxy.

Before the REGISTER message, there's just DNS lookups then one reply that's "500 Internal Server Error"

ALG is off, I have tried switching it on before, but I'll try again now that I'm at least getting a reply from their server.

Internet Protocol Version 4, Src: 212.XXX.XXX.XXX, Dst: 195.89.27.199
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x68 (DSCP: AF31, ECN: Not-ECT)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (26)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 669
Identification: 0xbe04 (48644)
Flags: 0x40, Don't fragment
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 64
Protocol: UDP (17)
Header Checksum: 0xd4ef [validation disabled]
[Header checksum status: Unverified]
Source Address: 212.XXX.XXX.XXX
Destination Address: 195.89.27.199