Remote Phone Receive Call Issues

[Sabyre]

Hello folks,

Been using FusionPBX for half a year or so and after some initial steep climbs on the learning curve it has been great and we really like it.
Recently we moved locations and since the move it's been a nightmare getting the system 100% functional.

Environment Info
FusionPBX 5.1.1 presented via Debian 11 within a Proxmox VE
Server has a public static and is NOT behind a NAT.
Two gateways were configured. A local AudioCodes MP114 for analog POTS and Twilio.
The phones were remote and behind a NAT via pfsense.

After moving the server rack and phones the only changes were the new IP block for the servers and the removal of the MP114 as we ported the number to Twilio.
Since the move the phones will not receive any calls; local (phone to phone) or external. They can make outbound calls without issue.

To try and narrow down what the issue could be we set up a couple phones on the same network as the FusionPBX server giving the phones public facing IP address and they worked without issue for Inbound / Outbound external calls as well as local phone to phone calls. This to me points to a NAT issue in the pfsense configuration the phones normally would reside behind.

I have already spent an entire day researching and trying different configs, I am reaching out in the hopes that someone might have some suggestions.

 

[Sabyre]

Just a gentle bump.

 

[cemotyz09]

Probably need to add twillio ip block to acl list since you didn't specify anything about acl list but a log would help more knowledgeable folks to know I'm sure.

 

[Sabyre]

Thank you for the response.
If the phones are on the same network as PBX all works fine. So, not an ACL issue. But this is not practical as the PBX is on a public network.
Pretty sure it's a NAT issue, just not sure which specifically.
We have another phone at an offsite location also behind a pfsense NATed router that works fine. Can get both local and external calls in and out as well as phone to phone works just fine.

 

[whut]

@cemotyz09 was correct. It is an ACL issue.

 

[Sabyre]

@cemotyz09 was correct. It is an ACL issue.

Incoming external calls (from Twilio) are successful in reaching and being processed by the PBX. Those calls successfully make it to the phone on the same network and an additional remote phone, without issue. Just not the phones behind a specific NAT.

I did notice that the phones having issue are registering TCP or UDP and not TCP-NAT or UDP-NAT as they should be.
See image... Red box is problem phone. Can call out to internal and outbound.. Can't get calls in from either internal or inbound.

 

[whut]

Fixing your ACL issue is paramount for success.