External SIP profile not responding to provider's OPTIONS ping

[mdoupe]

Hi all, hope someone can help with what should be a simple question.

Our provider uses IP authentication for SIP trunks. I created a binding with them from their public IP to <our public IP>:5080 (which is forwarded in the firewall). I added a gateway with the suggested settings on the provider's help site and the signalwire documentation. I added all of their public IP ranges to "providers" under access controls. using sngrep and tcpdump I can see the provider is sending OPTIONS packets, but sofia is not responding. When I make an outgoing call I can see two way communication.

What do I need to do to get the external sip profile to respond to SIP OPTIONS packets?

Thanks!

 

[mdoupe]

I've now learned about Event Guard.

I did not set up the ACL prior to the gateway, so I believe my SIP provider's IP was blocked in IPtables "sip-auth-ip" chain by Event Guard. sngrep and tcpdump see the traffic before iptables has a chance to do it's thing, so they were seeing the traffic but sofia was not (helpful thread here). Removing the block resolved the issue. ("Status" > "Event Guard" > check an event > "Unblock")