SIP ALG on OpenWrt - OpenWrt Forum

We are facing issues with VoIP applications and we would like to know if OpenWRT uses SIP ALG by default. SIPALGonOpenWrt InstallingandUsingOpenWrt david.lynch February8,2021,4:00pm #1 WearefacingissueswithVoIPapplicationsandwewouldliketoknowifOpenWRTusesSIPALGbydefault. vgaetera February8,2021,9:02pm #2 I'mnotsureaboutyourproblem,butthismightberelated: [SOLVED]Incomingcallsnotreachinghostsonthenetwork-#2byvgaetera 1Like david.lynch February9,2021,5:36pm #3 Thankyou,butnotrelated,really. VoIPprovidersaysthatweshoulddisableSIPALGinanyform,theysaythatusuallyroutersdoeshavethisenabled.Doesn'tseemtobeanOpenWRTfeature. 1Like dlakelan February9,2021,5:57pm #4 theconntrackhelperisakindofsipalgIbelieve,itopenscertainportsonthebasisofreadingtheSIPmessages.makesureyoudon'thavethe kmod-nf-nathelper-extra packageinstalled.Ifyoudon'tthenthat'sasfarasyouneedtochaseitIthink. 1Like david.lynch February9,2021,7:47pm #5 Noexactmatch.Onlythefollowingones: kmod-nf-conntrack kmod-nf-conntrack6 iptables-mod-conntrack-extra (wouldn'tbethisone?) kmod-ipt-conntrack-extra kmod-ipt-conntrack Ifitisoneofthose,howdisableSIP-ALGwithoutbreakinganyotherfeature? vgaetera February9,2021,8:13pm #6 Couldyoudescribetheproblemitselfindetail? 1Like david.lynch February9,2021,10:05pm #7 Callsaremutedor"ServiceUnavailable".OtherVoIPprovidersdoesn'thaveanyissues. Weonlydocalls,wedon'treceive. 1Like dlakelan February9,2021,10:39pm #8 david.lynch: muted Onewayortwoway? AlsodoyouhaveapublicIPorareyoubehindCGNat? 2Likes david.lynch February9,2021,10:46pm #9 Mutedbothways.WesuccesfullycalledthesamenumbersusinganotherVoIPprovider. public,fixedIP.NoproblemsusingotherVoIPproviders(inadditiontothosethatnormallyarise,suchasdifficultiesincallingcertaincountries). dlakelan February9,2021,11:22pm #10 Hmm...usuallythismeansyourSIPprovideristryingtodosomeshenaniganstogetaroundNATandtheirshenanigansarenotcompatiblewithsomeothershenanigansthatsomeoneelseisdoing. WhatdeviceareyouusingasyourSIPendpoint? ItmightbeworthwhiletotcpdumponyourWANporttoseewhatkindsofpacketsarearriving.Theaudiowillbeudp.soyoucoulddo: tcpdump-ieth1udp ifyourwanuseseth1forexample. thenmakeacall,andlookforwhetherthetrafficisactuallyflowing,andwhichportsitson 2Likes lleachii February10,2021,10:58pm #11 SlipstreamattackandOpenWrt?SiteFeedbackandOtherQuestions AreslipstreamattackspossiblethroughanOpenWRTrouterwiththedefaultconfiguration? ItseemstheNATslipstreamattackwasannouncedthedaybeforeyesterday.Inshort,itisdescribedasanattackonwebbrowsersbehindApplication-levelGateway(ALG)capablerouters.IdonotfullyunderstandwhetherthatappliestoOpenWRTornot. WhatIdidlearnandunderstandisthataccordingtoWikipedia,ALGisinnetfilteronLinux.UnfortunatelyIcouldnotdetucttheanswertomyquestionfro… SlipstreamattackandOpenWrt?SiteFeedbackandOtherQuestions Withthepackagekmod-nf-nathelper-extrawhichIuseforproto_gre(andalsounfortunatelyloadssiphelpermodules)therouterisvulnerableastestedonthissite:http://samy.pl/slipstream/server Soatthemoment,thebestcourseofactionistoNOTuseanyNAThelpermodules. david.lynch February11,2021,9:59am #12 AsSIPendpointweareusingMicroSIP. vgaetera February11,2021,10:11am #13 https://en.wikipedia.org/wiki/MicroSIP MicroSIPisaportableSIPsoftphonebasedonthePJSIPstackavailableforMicrosoftWindows. MakesuretoconfiguretheWindowsfirewallproperly. david.lynch February15,2021,4:55pm #14 Weneedclarificationonthis. TherewillbenewerversionsofOpenWRTnotbeingaffectedbythis? Doweneedtochange/removeanypackagefromourcurrentOpenWRTsetups? lleachii February15,2021,8:43pm #15 david.lynch: TherewillbenewerversionsofOpenWRTnotbeingaffectedbythis? ThethreadIlinkedwasquiteextensive.Thewordingofyourstatementsseemasifyoudidn'treadit.Also,theSIPALGthingisnotOpenWrt-specific. david.lynch: Doweneedtochange/removeanypackagefromourcurrentOpenWRTsetups? Thethreadalsonotedthere'snoissueswithdefaultOpenWrtasit'snotinstalled. david.lynch February15,2021,9:07pm #16 I'vemadenostatements,justquestionstobesureof-bettersafethansorry. Indepth,there'snoSIPALGbydefaultonOpenWRT. 1Like xeonpj January21,2022,8:43pm #17 hellofriends,Idon'tquiteunderstandwhatishappeninginmyrouterbutIthinkitisrelatedtoALG.TheproblemisthatthePUBGgamedoesnotworkvoicecommunication.itseemstousesomekindofsipvoipserverandmaybetherouterisblockingit.Ihavear7800withthefinal19.07.8.Ihavetriedalltheimages(kong,nss,21.02,etc)andtheproblempersists.IfIusemy1043ndorthemobileconnectionviawifiand4g,everythingworkscorrectly.inmycaseIwouldwanttoactivatethealg,Ithink.thepackagesmentionedarenotshowinguponmyrouter