Suricata 5.0.5_1 - SIP fax transmission failing

Started by wkoch, February 26, 2021, 08:30:18 PM

Previous topic - Next topic
February 26, 2021, 08:30:18 PM Last Edit: February 26, 2021, 08:37:03 PM by wkoch
Here my observation with 5.0.5_1 version.

Updated suricata 5.0.5_1 by installing OPNsense 21.1.2 update.
(Suricata monitors WAN1 (of 2 available WAN ports) only in IPS mode.  Asterisk Fax Server and physical Fax machine with ATA are connected to a separate LAN and traffic of these devices is routed through WAN2 (both LAN and WAN2 are not monitored with suricata)).

Almost all attempts to send or receive faxes failed with various error messages on the fax server and the real fax machine shows "communication error". Only few faxes could be sent, with some lines missing. SIP telephony works flawless (without hearable glitches).

I suspect UDP packet loss or delay (maybe high system load?).

Reverting back to 5.0.5 immediately solves the problem.

Walter

Do you happen to know where to find the change log.  I did a quick search couldn't find it.