TIPS IPBX on Pi with non-standard network

[L V Lammert]

We have four lines and 16 stations, .. been trying to get IPBX running on a Pi, but it fails to register with our Vitelity account, and it seems like the root problem may be the network configuration:

* External (public IP)
* Internal (office network, 10.0.0.n)
* Phones (separate POE network, 10.0.1.n)

Given that IncrediblePBX has a lot of security tools designed for a single network interface, is there any to get one working in this environment?

Also, I tried to start over recently and was amazed to find that the current version had not changed for almost a year - what IS the current path forward for Raspbian systems? Would it be better to start over with another flavor?

 

[ostridge]

You don't mention the internal IP and mask of your iPBX and of your router (orSBC), however the post link below may give a clue about avoiding the subnet.
Are your phones able to register with the ipbx? Is the ipbx able to ping internet servers domain names?

How do I allow registrations from separate subnet?

 

[L V Lammert]

You don't mention the internal IP and mask of your iPBX and of your router (orSBC), however the post link below may give a clue about avoiding the subnet.
Are your phones able to register with the ipbx? Is the ipbx able to ping internet servers domain names?

How do I allow registrations from separate subnet?

Subnets are all Class C, .. the note you referenced is a bad subnet on a single IF, which, unfortunately, is not the problem here.

IPBX uses many different security tools, .. is there any documentation on them? For example, where is the 'master' iptables ruleset?

 

[L V Lammert]

Forgot to add, .. if anyone can help with networking issues, we would be happy to compensate.

 

[jerrm]

Subnets are all Class C, .. the note you referenced is a bad subnet on a single IF, which, unfortunately, is not the problem here.

IPBX uses many different security tools, .. is there any documentation on them? For example, where is the 'master' iptables ruleset?

For a Pi it should be /etc/iptables/rules.v4. None of the rules are interface specific, so multiple interfaces shouldn't be an issue with iptables.

Normally 10.0.0.0/8 should be wide open, but depending on when and what state the script was in when you installed it might (unlikely) be different.

Are the nets defined correctly under SIP Settings?

 

[L V Lammert]

FYI, .. finally got it working! Turns out the Vitelity configuration was not built correctly, .. did not have anything to do with the network config. Thanks to all!

 

[ostridge]

where is the 'master' iptables ruleset?

For a Pi it should be /etc/iptables/rules.v4

FWIW
That depends what you call the 'master' the /rules.v4 were imported to /etc/iptables/rules.v4.ubuntu14 , the content of which was copied by the build script into /etc/iptables/rules.v4 and presumably similarly with etc/iptables/rules.v6.ubuntu14
After the install you will have used add-ip and add-fqdn to modify your working copy /etc/iptables/rules.v4 and ( I assume ) rules.v6 as appropriate.

 

[wardmundy]

FYI: With the latest Incredible PBX builds for Wazo and the Raspberry Pi, some additional rules may exist in /usr/local/sbin/iptables-custom. These get loaded on boot and whenever iptables-restart is executed. Details here.

 

[L V Lammert]

You TEASE!!! When will there be a migration path from IPBX 12 -> IPBX 13?