Router open ports issue

Having issues with your magicJack? Post here, and we'll try to help you out!

Moderators: Pilot, Bill Smith

Post Reply
brianmac
MagicJack Newbie
Posts: 3
Joined: Tue Apr 15, 2008 11:27 am

Router open ports issue

Post by brianmac »

Hi, I have the following ports open 80, 25,110, 443, 5060 - 5070. These are open from my internal lan. I am not getting ringing on the magicjack, when I call my home phone. I can connect to my home phone and see the call connecting, but no sound on the magicjack side. When I run magicfix, I only get one error:

Unable to access your magicJack. Please reinsert the magicJack and contact tech support if the problem continues

I have tried rebooting and not using the usb extension. When I put my laptop(computer with magicjack) on my DMZ, everything works fine. I have to conclude that it's a port that is closed.

any ideas?

Thanks,
Brian
mufon
Dan isn't smart enough to hire me
Posts: 296
Joined: Fri Jan 25, 2008 9:50 am
Location: HIghland Village, Texas
Contact:

Post by mufon »

Do not open ports 5060-5070. Most likely your router incorporates an application layer gateway. When you open ports you defeat the ALG's ability to do its job. Generally speaking, the opening of ports is useful on symmetric nat, or to allow incoming connections that are initiated external to the nat firewall. Since MJ initiates conversation with the sip proxy, then opening inbound ports for incoming connections would not apply to your situation, therefore you must allow the ALG to do what it is designed to do. An exception, however would be to use a port triggering rule which does utilize the ALG. Do this only if necessary, and it probably is not.
"Looking for a new job. I have worked for Adelphia, Enron, Health South, Worldcom, and most recently British Petroleum."
brianmac
MagicJack Newbie
Posts: 3
Joined: Tue Apr 15, 2008 11:27 am

Post by brianmac »

My router is a smoothwall 3.x. I have all outgoing traffic blocked, except 80, 443, 110, 25. I notice when I make a phone call, it doesn't ring, the call connects and still there is no sound on MJ side. I also noticed in my router log, my PC is trying to go out port 49156 and trying to connect to port 17866, which of course I am blocking.
Again, if I put the magic Jack on my router DMZ, it works fine, so it MUST be a port issue....
mufon
Dan isn't smart enough to hire me
Posts: 296
Joined: Fri Jan 25, 2008 9:50 am
Location: HIghland Village, Texas
Contact:

Post by mufon »

brianmac wrote:My router is a smoothwall 3.x. I have all outgoing traffic blocked, except 80, 443, 110, 25. I notice when I make a phone call, it doesn't ring, the call connects and still there is no sound on MJ side. I also noticed in my router log, my PC is trying to go out port 49156 and trying to connect to port 17866, which of course I am blocking
There you have it. MJ makes an outbound to the MJ proxy on port 5070 for SIP, and RTP connects locally on ports 49XXX to 65535. Of course the entire RTP range of ports are not used simultaneously, but I pair of ports in that range will be selected. They tend to connect to the asterisk server in the range of 10000-20000, the default RTP range in asterisk. Do yourself a favor and allow all outbound for the internal IP address that hosts your MJ.
"Looking for a new job. I have worked for Adelphia, Enron, Health South, Worldcom, and most recently British Petroleum."
brianmac
MagicJack Newbie
Posts: 3
Joined: Tue Apr 15, 2008 11:27 am

Post by brianmac »

Thanks for the help. That's why I wanted to know what all the ports that needed to be open( incoming and outgoing). I am the IT Manager and have our network locked down. I do not allow all ports from LAN outbound to be open.
mufon
Dan isn't smart enough to hire me
Posts: 296
Joined: Fri Jan 25, 2008 9:50 am
Location: HIghland Village, Texas
Contact:

Post by mufon »

Good deal, then you know what to do now. If you would like, you can narrow the range of ports used for RTP by tweaking the registry. Off the top of my head I can't tell you the exact Key / Value because I am running a linux box therefore I can't "look it up". I can tell you that it is under HKEY\CURRENTUSER\software\talk4free but that is the best I can do from memory.
"Looking for a new job. I have worked for Adelphia, Enron, Health South, Worldcom, and most recently British Petroleum."
VaHam
Dan Should Pay Me
Posts: 851
Joined: Wed Feb 13, 2008 8:02 pm

Post by VaHam »

mufon wrote:Good deal, then you know what to do now. If you would like, you can narrow the range of ports used for RTP by tweaking the registry. Off the top of my head I can't tell you the exact Key / Value because I am running a linux box therefore I can't "look it up". I can tell you that it is under HKEY\CURRENTUSER\software\talk4free but that is the best I can do from memory.
Good Info!

It is in:

My Computer\HKEY_CURRENT_USER\Software\talk4free\USB Softphone\Options\SIP 2.0

Paramters are:

SIPPortRangeStart (49152)
SIPPortRangeEnd (65535)
Post Reply