Now I can not receive any incoming calls. The incoming call either goes straight to voicemail, or they get a busy signal. I go from one problem to another. I am beginning to wonder about this service. Outgoing calls are working.
Ticket TNW-352942
Printable View
Now I can not receive any incoming calls. The incoming call either goes straight to voicemail, or they get a busy signal. I go from one problem to another. I am beginning to wonder about this service. Outgoing calls are working.
Ticket TNW-352942
You will need to work with our support team to address your support-related issues. This is not a support forum.
Please don't take this personally, but VOIPo has multi-thousands of customers and I would guess that if they were having the problems that you are having, they would have been long gone..
I have been around since the beta testing days and except for an occasional burp, have absolutely no problems. The only problems I seem to have are due to my changing modems-routers and ATAs.
Only then, when I mess up, do I suffer...and I only do this when my wife is out or I would really suffer.
Seriously, Tim has posted many times over the years to indicate that not every provider will work flawlessly for every user due to numerous reasons...some of them not correctable.
Years ago before VOIPo when I tried other providers, my wife would say to her friends...."Sorry, that's my husband's telephone system."
I haven't heard that for years now..
Quote:
Originally Posted by VOIPoTim
And contacted support is what I did do. Odd though, from what I read in this forum, about 95% of the different threads are support related questions or concerns. I will keep this in mind though, thank you.
Is it recommended that the SIP & ALG be "disabled", even with a 2Wire router/modem? I did get inside my 2Wire and found these two settings.
You can google search it, and when it comes to voip, you'll find most everyone recommends turning them off. Also, besides SIP in the ALG, also see if there is something labled SPI (Stateful Packet Inspection). AKA Firewall. Or anything similar to firewall. Turn that off also. Best of luck. Mike....
If I do disable the firewall, won't I then be vulnerable to malicious hackers getting into my computer, as in not being protected any longer? I read if I use the "bridge" that indeed disables my firewall.
Your answer will have to be in "laymen's" terms, otherwise, I will not be able to understand all the technical information supplied.
This might just be my imagination, or just desperation to get this equipment to work correctly, after I disabled the SIP in the ALG, the phone seems to work better. Time will tell.
It's quite possible that you could be working better. The SIP/ALG setting in a router was designed around "Software" using SIP. Such as the many softphones that a computer can run with a headset. When this is set up in the router, it can conflict with the SIP that the external voip adapter is trying to do.
As for the firewall being disabled, there a couple things to realize. 1) Most people don't use static IP addresses. They use a router that has "NAT". NAT (Network Address Translation) is what is used to allow you numerous private (Internal) IP addresses like 192.168.1.10, and have all these local IP addresses SHARE the Public IP address (The 1 REAL IP address that your internet provider feeds your DSL/Cable modem). NAT by it's own nature is a firewall. Not intentionally, but because an outside person can't get directly to 192.168.1.10 or whatever your PC's IP address. 192.168.1.? is not unique every basic consumer router uses those IP addresses. So to get to your computer, the bad guy has to get to your REAL (Public) IP address, then using ports, get inside. This alone is difficult unless a bad guy is specifically trying to get a specific person's computer.
But, besides the NAT, most operating systems like Windows XP/7, and others have software firewalls built in. Basically, the NAT router knows WHICH 192.168.x.x. equipment is ASKING for an outside internet site. When the response comes in, the router know where to send it. The software firewall on the computer knows what you're asking for. If it knows you asked for cnn.com, then it will ALLOW anything from cnn.com coming in to go to that computer. However, if an inboud packet comes that your computer didn't first request, then the firewall tells you. "Hey dude.... Someone is trying to get in and you didn't invite them. Can they come in? If you don't say yes, then it is blocked. And while windows/OS type firewalls are OK, you can even get better ones like ZoneAlarm or BlackIce. And you can specifically teach the firewall to not let in ANYTHING that you don't approve. Even to the point where other computers on your network need permission.
You normally only get incoming packets because you ASKED for them. I.e. web surfing, download a file, etc... Firewall is going to let them in, because you asked for them. However, some people have servers, play games, etc... that require a lot of inbound traffic that wasn't specifically asked for. Voip is that way to. Voip is special because it basically uses port 5060 or similar for the SIP traffic. No other computer will normally deal with that port. Email has it's own port. etc... The RTP traffic, (That's the traffic with your actual voice conversation on it), can be a number of different ports. That's why VoipO recommends such a large number of ports be opened. They don't use the same ports continuously. It's somewhat random. There's many reasons for this, but one of added benefits it that someone can't lock in on a specific port and stop, copy, etc... your phone calls. But fortunately, there are over 65000 ports PER IP ADDRESS, so if you do set up a server, security camera, or other device that needs to be spoken to from the outside, there's plenty of ports available.
So, the bottom line is that firewalls are indeed important. But I, and most networking people, believe that it's best to firewall what you specifically want to, and not everything. In a decent business IT network, they would never have a combined router/switch/firewall/etc... that you or I bought. e.g. Linksys wireless router from Walmart. They will use their incoming bandwidth and connect it to a dedicated router. That router will feed a switch. There will be some things, like a public website that customers visit that will be on that switch with nothing else. Another spot on that switch will possibly feed their VOIP/Phone system. A third port will feed a "Dedicated" firewall. This firewall now connects to another switch that feeds all of that company's employees computers and such. This stops the outside world from getting to their internal network, but allows the outside world to get to the public website or call them on their phone system. When you do it the proper way, there is NO PORT FORWARDING. Why? Because you BUY separate static IP addresses. There's an IP address just for the VOIP/Phone system. A different IP for the WebSite server. A different IP for the internal network. Then once inside, they use NAT and give all the employees 10.1.1.x (Similar to 192.168.1.10 type addresses); so they can share the one static IP address.
But the common consumer, doesn't want to pay for separate IP addresses for their computers, voip, gaming, etc... So they take the 1 IP address from the ISP and use a combination router/switch/wireless/firewall and make everything go through that. The problem is, you need to know port forwarding, security, firewall, etc... to eliminate conflicts.
So, bottom line. Make your router as basic as possible. No firewall turned on. No ALG turned on. No UPnP turned on. Give your Voip Adapter a static IP address of 192.168.1.x or whatever, so it's the SAME IP address ALL the time. Port forward in the router the ports necessary to that IP address. Then, use LOCAL software firewall, virus protection, etc... on each machine to protect them from outside influences. Hope this helps. Also hope it was explained basic enough. best of luck. Mike....
I would recommend against disabling the router's firewall. While it is true that software firewalls exist and generally work well, router firewalls are reliable and rarely cause issues. Disabling SIP ALG is recommended, though. If you can tell the router to place the adapter in a DMZ zone, so that it looks like it is outside the router, even better.
I agree with holmes4. I don’t see any need to disable SPI unless your router is having firewall issues. Forwarding ports or DMZ is supposed to open up a clear tunnel through the SPI firewall. If you find port forwarding or DMZ is not working correctly with SPI enabled, then I’d be looking for another router to buy…..Quote:
Originally Posted by christcorp
Putting something in the DMZ does not make it appear to be outside the router. It's simply a way of port forwarding "ALL PORTS". It has nothing to do with the SPI firewall, or getting around it. DMZ is just a way to do port forwarding or port range forwarding when you don't know which ports to forward. Some say that it bypasses the firewall, but it's simply giving permission for the packets to enter. The IP address in the DMZ has to authenticate those inbound packets, or they are useless. But because you are giving permission for all packets to be forwarded, it could be seen as bypassing.
Firewalls do basically one thing. They block unsolicited incoming data. If you ask for it, a firewall is not going to help you. It will allow it in. That's why virus', trojans, malware, etc... are so tricky. If you receive a file in an email attachment, or you go to a website and accept certain conditions, then you have solicited and the SPI Firewall in the router is going to allow it to come in. With a true firewall (Free standing hardware) or a software firewall like zonealarm or black-ice, you can teach it and control it. A basic SPI firewall in a linksys type router is simply ON or OFF. Very few give you any real control. Real firewalls, and most software types also allow you control outbound traffic too. Some people don't think you need to worry about outbound because you wouldn't request to go some place unless you wanted to. Well, in many companies or those with children, you may want to control certain places they can't go to. But this is a secondary use for a firewall, and not what is of concern here.
I've had computers for more than 30 years. I can honestly say that I have been able to protect them, and have NEVER had an unsolicited entry from the outside. And I don't have the SPI firewall turned on in the router. I use the software firewall that comes with the operating system; e.g. windows or linux. I then usually have a secondary that is much more controllable such as Zonealarm or black-ice. Many SPI firewalls in routers, that are basic with little or no control, do in fact cause some problems with server type services like voip, web servers, gaming, etc...
As I mentioned above, a REAL NETWORK would never have such a thing as a router/switch/wireless/firewall/etc... combo device. For the majority of computer users, a combo router that we are talking about works flawlessly. Their computer use is very basic. For those who have a bit more complex network, including voip, intense gaming, servers, etc... they can use the combo type routers, but they need one that will do what they want, and they need to learn a little more about how to use it. For those who truly have a real network, (Not just multiple computers on the internet); but computers sharing with each other; web server; email server; game servers; file serving/sharing; etc... then the all in one combo router isn't the way to go. Actually; the router part is fine, but you would install separate hardware to different parts of your network. E.g. Hardware firewall, switches, static Public IP addresses; etc...
I always tell people to start off their combo router in a very tight mode with SPI on, no port forwarding, etc... You don't fix what isn't broken. When you have inconsistencies with servers; such as voip, the first thing you do is experiment using the DMZ. If that works, then you have a PORT problem. You DON'T LEAVE it in the DMZ. You figure out the ports you need and you forward those ports or range. Then turn off the DMZ. (Again, the DMZ is simply PORT FORWARD ALL PORTS). Nothing more. It's not outside your router. If you still have problems, and it isn't the ports, then you turn off the ALG. Then move on to turning off the SPI. Once you know what fixes the problem, you can address if you need that function for another part of your network. But no, you don't need the SPI firewall on your router if you have a decent software router. The software can actually be much better. But if a person thinks hardware is always better, you can buy a standalone hardware firewall. Turn off the SPI in the combo router so your voip is happy, plug the hardware firewall into one of the combo router's switch lan ports, then feed that to a switch for all your computers. Now you have the best of all worlds. Unless of course in your COMBO Router, you are also using that for your wifi. But that has a different set of protections and we don't have to discuss that here.
DMZ does not stop Statful Packet Inspect (Firewall) from happening. Some are still confusing the difference between NAT and Firewalls (SPI). NAT is for ROUTING. It allows more than one PRIVATE IP Address like 192.168.x.x or 10.x.x.x to SHARE one SINGLE PUBLIC IP address. This has absolutely NOTHING to do with Stateful Packet Inspection. SPI (Firewall) inspects the incoming packets for patterns and such. If you did not make a REQUEST for such traffic, it won't be allowed in. DMZ has absolutely nothing to do with that. DMZ is an easy way of forwarding ALL PORTS. That's part of the ROUTING process. When only 1 item in your network requires certain ports for incoming traffic, then DMZ is fine. But if you have 2 or more things that NEED certain ports; e.g. voip and gaming or IP camera or web server , etc... then you can't use DMZ. Again; DMZ has absolutely nothing to do with your firewall.Quote:
I agree with holmes4. I don’t see any need to disable SPI unless your router is having firewall issues. Forwarding ports or DMZ is supposed to open up a clear tunnel through the SPI firewall. If you find port forwarding or DMZ is not working correctly with SPI enabled, then I’d be looking for another router to buy…..
Now I will put out one caveat. I have not used every single combo router in the world, so it's possible that a router could have a DMZ that bypasses the firewall. But that doesn't sound possible. Again; when an incoming packet is at the router, it has an address. And that address has a port assigned. If you tell the router that 1 IP address is in the DMZ, then the router says: "Fine; I will send ALL inbound traffic to that IP address, unless an internal IP address specifically requested something". So while it might be possible, it is so improbable. DMZ is part of routing and NAT. SPI Firewall is about inspecting ALL incoming traffic.
Now, will having an IP address in the DMZ allow the incoming traffic to come in? Yes. For Voip, there is the session initiation process. (SIP). For a web server, usually there's some sort of authentication. Basically, if a device or software on your end is expecting certain types of packet and traffic, it will authenticate and accept the traffic. If not, there are other ways to protect. But bottom line: Having an IP address in the DMZ isn't bypassing the firewall. It's simply port forwaring.
After re-reading my last 2 posts, I feel that it is possible for a lot of confusion on my point. I would like to very briefly clarify something. When an IP is in the DMZ, SPI is still happening, however, you have basically said: "I don't care if the packet was unsolicited or not, send it to me anyway". So in that regard, you could say that you are bypassing the firewall. However, the actual process of inspecting the packets still exists. And that could possibly affect the traffic you are trying to get in. That is why I said that in my opinion, it is best to turn off the SPI firewall all together and use software or hardware firewalls separately. Plus; for those who do gaming or other activities that require certain ports, you most likely will have an issue if you use the DMZ for voip. You can only have 1 device in the DMZ. And if you do that, then port forwarding will get messed up, because DMZ wants to forward ALL ports to that one IP address. Thanks for letting me clarify.
All this technical jargon is probably why VoIP will never become the phone service of the masses. The average Joe just wants to be able to make and receive calls without having to have a vast knowledge of computers and routers and port forwarding etc...., and why should they have to do all this technical trouble shooting anyway?
You don't see this with the good old fashioned land line phone service or with cell phone service. 99% of people expect to dial a number and have the phone on the other end ring, afterall, that's what they are paying for.
That's because the good old fashioned land line phone and cell phone service have an internal network. Coast to coast it's all the same network. Whether it's Centurylink, Verizon (Landline), ATT, etc... they use the same system. They hand off to each other seamlessly. Voip relies on the internet. It relies on many different internet providers; different internet technologies; etc... That isn't voip's fault. Now, ask yourself, why Ma'Bell and cell service costs 5X more than voip? Sorry, but you can't have it both ways. People who come to voip, do so initially to save money. Well, you can't have the quality and reliability of a closed network at internet prices. Sorry, but it can't happen.
And you're right, voip probably won't become the phone service of the masses. But that's not voip's fault. It's the consumer's fault. It's their ignorance. You don't buy a ford focus as your only car if you've got a family of 6. You also don't buy it for hauling firewood out of the forest. I will say, if a person had internet access, hooked up their voip adapter and NO COMPUTERS or ANYTHING...... Just the internet and voip adapter..... I'd give you a 99.9% chance of perfect success. But then again, that's what a traditional landline is; isn't it. 1 service and 1 use.
So; why do you expect the same type of service? Shared network vs dedicated network and $10-$15 per month vs $50-$60 per month.
I did some research in the voipo forums for similar issues concerning firewalls, DMZ, etc... Here's one that sort of even makes my point.
http://forums.voipo.com/archive/index.php/t-1534.html?
The post in particular is:
This problem has nothing to do with this customer's problem. But I wanted to point out that putting something in the DMZ isn't TOTALLY bypassing the SPI firewall. This individual found that out first hand.Quote:
olaf wrote:
07-24-2009, 10:16 AM
I had an issue yesterday when my PAPT2 failed to reregister after I rebooted my router. I submitted a ticket, the response was prompt, and they enabled a STUN server and set NAT keep-alive packets to be sent every 5 minutes to help prevent the problem from happening again. They also recommended that I disable the SPI firewall on my router because it may cause intermittent problems, even if it seems to be working. I rebooted the router again today, and when the PAPT2 again failed to register (with the SPI firewall still on), I experimented a bit with putting the PAPT2 in a DMZ vs. turning off the firewall completely. As far as I could tell, the DMZ did not let it reregister, but shutting the firewall off did.
I'm not crazy about leaving the firewall off, but I suppose I could use an iptables-based firewall instead of the SPI firewall (I am using DD-WRT firmware). I'm just wondering if others out there have thoughts & experience on the pros & cons of an SPI firewall and other router security measures while using VOIP.
Thanks.
So; why do you expect the same type of service? Shared network vs dedicated network and $10-$15 per month vs $50-$60 per month.
You're also forgeting that the $50-$60 range for cell is also including, not only voice, but text and data. If VoIP service was able to offer text and data, the cost would almost be the same anyway.
Ummmm...... Not trying to dog you, but how can Voip offer you "Data", when "DATA is REQUIRED to make voip work"??? Voip can't offer Data. Physically it's impossible and totally illogical. That's like saying a computer should offer internet service.Quote:
Originally Posted by wingsohot
However; you do bring up a very logical evolution. Now, with 4g LTE capabilities, cellular systems could technically put both Cable and DSL broadband services out of business. Unfortunately, it's a cost issue. Cell phones don't offer unlimited data. And trying to share your cellular data with your home computers is too expensive. And having a separate cell plan for each person is also too expensive. I.e. My existing unlimited data (Grandfathered); limited voice minutes; limited text plan; costs about $60-$70 a month. For both, my wife and me, that would be about $140 a month. If we used this replace home internet and thus voip, we'd have to add more voice minutes. Plus; while we have unlimited data on the phone, there is a cap for tethering to a laptop/desktop. It's not unlimited. PLUS, the latency isn't that great, so if you are into gaming or other time sensitive activities, it sucks. Although, with the newer LTE 4G it's definitely much better. Plus, you can't leave things connected 24/7 if you need to take your phone with you and use it somewhere else. So technically; cell phones can definitely put DSL, Cable broadband, Ma'Bell phone, and voip out of business. But because of cost and a few limitations, that's a few years off.
But voip can't "OFFER" text and data. Can a fax machine OFFER Dial Tone??? Texting is designed for mobile use. It's quick and simple. Limited number of character. No attachments. You need data for voip to work. If you are at home and have a data connection, you can text to people with cell phones. Go to verizonwireless.com and you can text online all you want. But again; voip can't offer text and data. It's not physically possible or even practical. If you want to compare prices, compare the $50-$60 monthly Ma'Bell Land Line phone with voip. You can't compare voip with a cell phone. They serve 2 totally different purposes. Landline phones cost 5X more, because of the dedicated network and overhead costs. Voip doesn't cost as much, because it doesn't have ANY NETWORK. It uses the "Internet Network" which is already available. Just like Fax doesn't have it's own network, it uses an existing landline network. (Hence, why it took a long time to get a standard for faxing). Many different fax companies trying to talk to each other. Well voip has all these different ISP's with different backhauls, connecting to different gateways, eventually connecting to the Ma'Bell landline service. You will have difficulties. That's why you pay so much for landline service.
If you are expecting the same quality and reliability and ease of use from Voip that you get from a land line, then you are naive, and probably should go back to paying your $50-$60 a month for phone and long distance service. Now, if you are willing to become educated, you can come to within 90-95% of the quality/reliability of a land line. If you don't want to learn anything, and you just want simple plug and play like wingsohot wants, then you'll probably have a 90% chance of having really good voice service. Being you want just plug and play, chances are you don't have anything more than a real basic home network. And there's a good chance your ISP is totally compatible. But there's also a chance that you can fall into the 10% who do have issues. I go to forums specifically about my ISP. There are some in the country, depending where they live, where they are getting 200+ms hops in their internet connection. That doesn't mean much to many here, but I can tell you right now that that will cause all sorts of quality issues with VOIP. Is this Voip's problem? No. But the customer doesn't know that. They aren't gamers, so they don't notice those long ping times in between hops. But voip does. And of course this ignorant person will say that voip sucks. Even though it has absolutely nothing to do with voip.
Bottom line: 90%+ of voip customers are going to have a real decent experience. They will realize that the quality probably isn't 100% as good as landlines, BUT, they will notice that they get TONS more features and capabilities, at 1/5th the cost of a landline, and they will live with the tradeoff and be very happy. The other 10% have a choice. Some will learn that they can make voip work for them and they will make the changes needed. Some won't become educated, they'll blame the voip provider, they'll move to another voip provider that works, and this will be their rationalization that the previous voip provider sucked. "They didn't suck, the individual was ignorant, but it helps them rationalize". Then, there will be a small amount who's internet provider simply is not compatible. Some manipulate ports and data. (Yes, they DON'T WANT YOU TO HAVE VOIP). Some simply have old crap equipment and it can't operate clean/fast enough. These people simply have no real option. But sorry; a Focus CAN'T have the same level of quality as a Cadillac. Not for the price difference. It's naive to believe otherwise. And a focus can't have the same capabilities as a pickup truck. Again; naive. Compare apples to apples. Voip is NOT landline, landlines are NOT cellular, and Cellular is NOT voip. When people realize that they are different; have different purposes; use different technologies; have different pros/cons; then they will realize the true potential. In the future, when old people who won't change die off, and fax machines and other dialup type users realize that technology is no longer needed; landlines will no longer exist. It will be Cellular and some sort of voip.
VoIP already is a product for the masses, but most people don't know that's actually what their phone is using. Just look at all the cable companies that offer phone service, in addition to ATT U-Verse and Verizon FiOS Voice. All of those products are delivered using the same IP protocols that providers like VOIPo use, the only difference is they get to connect their ATA widget directly to their network as it enters the customer home so that any equipment that a customer has installed won't be a factor.Quote:
Originally Posted by wingsohot
Internet-based providers are at the mercy of whatever the customer has on their home network, which is why you have reports of everything from "it works perfectly" to "it never works right" even from neighbors who both use the same VoIP service.
Just read this interesting and insightful article in The Verge - Phoning it in: the dirty secret of IP calling, and how it will change the phone industry
So true. Couple other things. Ma'Bell has been sending your phone calls basically voip for over 30 years. You don't think one call on one pair of wires goes cross country to talk to grandma; do you? But again; it's an internal network. Also; one of the reasons the cable company's "Digital Voice" costs more than voip like vonage and voipo, is because they aren't traversing the country over the internet. They use IP basically from your house to their head end or possibly regional, but it's handed off to the PTSN system much sooner. Hence, why you pay $35 for digital voice over the cable company. But you are correct; people have been using some form of "VOIP" for a long time. Especially their long distance through ma'bell for 30+ years.Quote:
Originally Posted by SpaethCo
I make voipO calls on my android. I only use it when I need to make a lot of calls and I don't feel like using up a bunch of my minutes. But there is an "ADDITIONAL" problem added to the original problem with voip. You've added more jitter and latency.Quote:
Originally Posted by holmes4
Definitely a good article. Unfortunately, until the "Net Neutrality" folks are educated; or technology changes where time sensitive data can be handled differently, voice and video conferencing will still have to compete with surfing, gaming, email, etc...The work around currently has been to add more bandwidth. But that isn't the answer. Voip calls don't need more than 120 kbps. But when all the other traffic on the internet and within your IsP's network, packets compete for what order they come in. Data can buffer; voip and video conferencing are very sensitive.
I think that most people could live with giving time sensitive apps like voip and video conferencing priority; unfortunately, there are the "Gamers" who think they should also have priority because their hobby is time sensitive. Until internet traffic is allowed to be prioritized, or technologically separated so the different types of traffic don't have to compete with lower priority traffic; voip will always have certain issues.
You are correct....going back to my roots with my telephone company, I remember that we had to use MCI and their microwave network (UGH!) to service a customer in Phila, as that was the only way we could get there at the time. The service was primitive and even though the towers up the coast had self-healing loops, every time there was a storm or lightning, the service went down and had to be reset manually and there weren't too many ways to contact TCG (remember them?) at the time.Quote:
Originally Posted by christcorp