SIP Trunks not clearing on twinned or forwarded calls

[caversham4]

Hi guys...help!!!

I have a IPO 500 v2 rls 9.03 with essential eddition and 6 Sip trunks. Incoming and outgoing calls are fine, no drop outs, transmission and all calls connect no problem. When I use either twinning or call forward to an external destination, again the call connects fine and transmission between the two again is fine(usually to mobile numbers). The problem is that once the mobile clear the call down, from either or both ends, the IPO dosent release the call and keeps alive until a reboot or clearing the call in system status. My sip provider has monitored the circuit and said that my Juniper firewall is causing the problem, my telco provider has given me a list of ports below to open and SIP ALG has been disabled
UDP/TCP 5060 to 5061
UDP 49152 to 65535

Any suggestions would be greatly appreciated.... its driving me bonkers

 

[derfloh]

UDP/TCP 5060 to 5061
UDP 49152 to 65535

That cannot be true! It is like putting IPO directly into the internet... You will not have to wait very long until the first one uses your IPO to dial expensive numbers.

 

[nnaarrnn]

If you HAVE to open those ports, start searching for a new SIP provider.

In the mean time, only allow traffic to and from your SIP provider's address on those ports.

 

[caversham4]

Sorry Guys, this is the document that the telco sent over, it seems they are all outbound traffic, although you are right does seem a lot of open ports..



Device Protocol Outbound Destination Destination Port
IP PBX / SIP SIP 85.119.63.4 UDP/TCP 5060 to


IP PBX / SIP RTP 85.119.63.4 UDP 49152 to 65535

 

[g18c]

DID Logic also have large port range requirements and the RTP media path needs to be from any ip address not just their gateway.

Any recommendations for SIP providers who don't have insane port ranges?

 

[amriddle01]

Gamma in the UK also request the same port range open/forwarded and also that the system sends the external IP of the site during call setup.. which means STUN usually, both bad things

 

[caversham4]

Strange you should say that amriddle01 as i have cured it by running stun and it now seems fine... dont ask me how but it does. All thats now populated in the stun settings are the external address and the port blocking field but it now seems fine, go figure...