NethVoice trunk problems

Hi,
I’m experiencing an issue with a PJSIP trunk in NethVoice registered to our local provider (fixnet.cz). Initially, the trunk works fine — both incoming and outgoing calls function as expected. However, after some time (typically days), and possibly not yet discovered circumstances, incoming calls stop to work:

  • When calling the number from an external line, there is no ringtone, and the call does not reach any internal extension.
  • The inbound route has not been changed since it was working.
  • The NethVoice dashboard still shows the trunk as “registered.”
  • Outgoing calls continue to work without issue.
    This SIP account worked reliably with a Grandstream VoIP gateway before switching to NethVoice, so I suspect the issue lies within NethVoice itself. I’ve noticed the problem may occur after unrelated configuration changes in NethVoice.
    Restartiing the NethVoice app does not resolve the issue.
    The only workaround I found is to delete and recreate the trunk in NethVoice / FreePBX, which restores functionality, but this is not a sustainable solution, regardless of that the problem is not indicated anywhere.
    Could you help identify the root cause or suggest a more permanent fix?
    Thanks in advance!

Is there a firewall in front of your nethvoice(-proxy) setup?
Did you allow ports 10000-20000/udp?

Please check the nethvoice(-proxy) app logs in the timeframe when the incoming call isn’t working to hopefully catch the issue.

2 Likes

Thank you @mrmarkuz.
The firewall ports were not open, so I opened them now (I’m just wondering how it’s possible that it worked before and only failed after some time)

Browsing the logs perhaps following message, which occurs repeatedly during problematic periods, caught my attention:

2025-06-23T09:23:21+02:00 [1:nethvoice-proxy2:rtpengine] [1750663401.009178] WARNING: [80648ae4-2d68-4650-a515-5949c0037299 port 10088]: [core] No support for kernel packet forwarding available (interface to kernel module not open)
1 Like

It seems IP forwarding isn’t enabled.

Please check if it’s enabled, a result of “1” means it’s enabled.

cat /proc/sys/net/ipv4/ip_forward

To enable it, see also https://www.baeldung.com/linux/kernel-ip-forwarding#2-permanently-enable-forwarding

cat /proc/sys/net/ipv4/ip_forward

returns 1.

I have just updated nethvoice and nethvoice-proxy to the newest versions.After it, unfortunately, incoming calls not working again. After dialing from external phone: unusually long silence (15 sec), then ring tone, but no ringing withing NethVoice system. Trunk showing as registered, outbound calls working normally. No activity seen in nethvoice / asterisk / nethvoice-proxy logs during the call attempts. Nothing helped, just deleting and recreating the trunk again.

Try to install sngrep

dnf -y install http://repo.okay.com.mx/centos/9/x86_64/release/sngrep-1.6.0-1.el9.x86_64.rpm

and launch it, check what the INVITE from the trunk does when it arrives.

A possible cause could be that OPTIONS are rejected and the INVITES find theports closed when it arrives. But also other bad things could happen.

The “No support for kernel packet forwarding available (interface to kernel module not open)” isn’t an issue: rtpengine would like to have this kernel module to forward RTP packets more efficently, but it’s not really necessary for the Nethvoice internal network configuration

3 Likes

Thanks for the sngrep advice.
sngrep output (filtered to communication with provider) during succesfull incoming call:

  [ ] 58   OPTIONS    fixnet_515535487@sip.fixn 515535487@sip.fixnet.cz   2     192.168.111.2:20041
  [ ] 203  INVITE     776314287@sip.fixnet.cz   s@sip.fixnet.cz           10    178.248.63.226:5060
  [ ] 232  OPTIONS    fixnet_515535487@sip.fixn 515535487@sip.fixnet.cz   2     192.168.111.2:20041
  [ ] 404  OPTIONS    fixnet_515535487@sip.fixn 515535487@sip.fixnet.cz   2     192.168.111.2:20041

I have opened / redirected UDP ports 5060-5061 and 10000-30000 (was 10000-20000 before) on firewall / NAT to NethVoice LAN IP.

select the INVITE and hit enter, you should se the details of how where the package goes. Take a screenshot and we’ll try to figure it out together. Also do the same with the OPTION as it could be the cause of the problems with the INVITE

1 Like


that’s a working call

Yes this one is. I’ll post back later if it stop to work again.

1 Like

Thans for your advices.
Seems the problem was caused by ports 5060-5061 not opened / forwarded on Firewall / NAT.
I was mislead by the fact it always worked first after creating the trunk so I have not put my attention this way.
Nevertheless I have learned about the sngrep tool in the process, so thanks again.

1 Like

Unfortunately, the joy was too early… not working again. Here is the sngrep output:
UDP ports 5060-5061 and 10000 - 30000 opened and forwarded on firewall.

  [ ] 1    INVITE     776314287@sip.fixnet.cz   s@sip.fixnet.cz           10    178.248.63.226:5060
  [ ] 2    OPTIONS    515535487@sip.fixnet.cz   515535487@sip.fixnet.cz   4     10.5.4.1:20041
  [ ] 3    OPTIONS    9218@192.168.111.2        9218@192.168.111.218      4     10.5.4.1:20041
  [ ] 4    INVITE     776314287@sip.fixnet.cz   s@sip.fixnet.cz           10    178.248.63.226:5060
....

2025/06/26 12:51:18.099802 178.248.63.226:5060 -> 192.168.111.2:20041
INVITE sip:s@192.168.111.2:20041;line=klnabpu SIP/2.0
Via: SIP/2.0/UDP 178.248.63.226;branch=z9hG4bK6219.d3944c663e56f1432ee9c8c9bc7e8b68.0
From: <sip:776314287@sip.fixnet.cz>;tag=01BE9BC5-685D26260001641F-3D5C6700
To: <sip:s@sip.fixnet.cz>
CSeq: 602 INVITE
Call-ID: C372A1C674906D5EF8293097@0d70ffffffff_pbx-1
Max-Forwards: 69
P-Asserted-Identity: <sip:776314287@sip.fixnet.cz>
Supported: 100rel, norefersub
Allow: ACK,BYE,CANCEL,INVITE,NOTIFY,OPTIONS,PRACK,UPDATE
P-Early-Media: supported


2025/06/26 12:51:30.311209 10.5.4.1:20041 -> 10.5.4.1:5060
OPTIONS sip:10.5.4.1:5060 SIP/2.0
Via: SIP/2.0/UDP 88.146.128.2:20041;rport;branch=z9hG4bKPj9c302b40-f6cc-4789-b023-fa493a509903
From: <sip:515535487@sip.fixnet.cz>;tag=9d84dbd1-7b5e-4e2a-b1c9-b0cec9a9fd05
To: <sip:515535487@sip.fixnet.cz>
Contact: <sip:515535487@88.146.128.2:20041>
Call-ID: e34bbd60-943b-45a9-879a-22b41355ac1a
CSeq: 12409 OPTIONS
Route: <sip:10.5.4.1:5060>
Route: <sip:515535487@sip.fixnet.cz>
Max-Forwards: 70
User-Agent: FPBX-16.0.40.3(18.26.1)
Content-Length:  0

Content-Disposition: session;handling=required
Content-Type: application/sdp
Content-Length: 281
Contact: <sip:btpsh-67cffa93-2cd8b9-a8292@178.248.63.226>

v=0
o=- 0 0 IN IP4 178.248.63.226
s=-
c=IN IP4 178.248.63.226
t=0 0
m=audio 43416 RTP/AVP 8 0 18 96
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:96 telephone-event/8000
a=sendrecv
a=rtcp:43417
a=maxptime:20
a=ptime:20


Problem seems to be resolved by switching the trunk transport from default udp protocol to tcp, which keeps the required firewall / nat connection open reliably.
Thanks all for your inputs.

1 Like