My FritzBox (with VOIP) is in front of an OpenWRT 18.06 box and if I connect a VOIP Phone over the Openwrt Box it blocks the the VOIP Channel back to the Phone (I can start a call but doesn't get back anything).
In the System Log I get this: "nf_conntrack default automatic helper assignment has been turned off for security reasons and CT based firewall rule..."
So I found two things:
I installed this package mentioned in this thread but it doesn't help.
Please also see if kmod-ipt-raw is installed, this should activate various cthelper iptables rules that bind specific ports and protocols to conntrack helpers.
Thanks, now internally it's working now as expected
But over my OpenVPN Connection it's still the same: I can start the call but do not get the voice back to my phone, there i still get the same log line in the system log. Other traffic is no problem so still maybe something in the firewall config ? Or how can I investigate this?
Additional Info:
That's maybe a special situation here because my ISP only provide IPv6 Addresses here over DS-Lite Stack and I connect over a IPv4-IPv6 Conversion Provider or sometimes IPV6 only (if I have a IPv6 capable Network). I installed both kmod-ipt-raw packages and tried both connection scenarios.
Can you please share your current /etc/config/firewall and iptables-save output? Is your OpenVPN connection in a dedicated zone? If so, try setting list helper sip on the corresponding zone.