[Asterisk-Users] Asterisk firewall config

Chris Stenton jacs at gnome.co.uk
Mon May 24 02:08:57 MST 2004


The latest cisco ios which has ip sip inspect seems to work well. Of course
with cisco you swap one set of bugs for another set when you upgrade. I have
yet to get a version of the ios that has all the features I want working at
the same time:-(

Chris

----- Original Message ----- 
From: "Karl Dyson" <kd at junesta.com>
To: <asterisk-users at lists.digium.com>
Sent: Monday, May 24, 2004 9:23 AM
Subject: RE: [Asterisk-Users] Asterisk firewall config


> Ah yes..... I too would like to see ip_conntrack_sip :)
>
> -----Original Message-----
> From: asterisk-users-admin at lists.digium.com
> [mailto:asterisk-users-admin at lists.digium.com] On Behalf Of Chris
> Stenton
> Sent: 24 May 2004 08:57
> To: asterisk-users at lists.digium.com
> Subject: Re: [Asterisk-Users] Asterisk firewall config
>
> If your firewall has some form of sip inspect then you will not need to
> leave open the rtp ports.
>
> Chris
>
> ----- Original Message -----
> From: "Tony Hoyle" <tmh at nodomain.org>
> To: <asterisk-users at lists.digium.com>
> Sent: Saturday, May 22, 2004 11:11 PM
> Subject: [Asterisk-Users] Asterisk firewall config
>
>
> > The asterisk wiki states that it needs SIP, IAX2, IAX and RTP open to
> the
> > world to work.  Is this necessarily true, or does it only need some of
> these
> > outgoing?
> >
> > I'm concerned as anyone that could guess an extension number&password
> could
> > use my server to make outgoing calls.  It would help if the extensions
> had
> a
> > netmask/allowable IP setting like the iax.conf file uses, but there
> isn't
> one
> > documented...
> >
> > Tony
> >
> > -- 
> > Te audire no possum. Musa sapientum fixa est in aure.
> >
> > Tony Hoyle <tmh at nodomain.org>  Key ID: 104D/4F4B6917 2003-09-13
> > Fingerprint: 063C AFB4 3026 F724 0AA2  02B8 E547 470E 4F4B 6917
> > _______________________________________________
> > Asterisk-Users mailing list
> > Asterisk-Users at lists.digium.com
> > http://lists.digium.com/mailman/listinfo/asterisk-users
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-users
> >
>
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>
> ________________________________________________________________________
> This e-mail has been scanned for all viruses by Star Internet. The
> service is powered by MessageLabs. For more information on a proactive
> anti-virus service working around the clock, around the globe, visit:
> http://www.star.net.uk
> ________________________________________________________________________
>
> ________________________________________________________________________
> This e-mail has been scanned for all viruses by Star Internet. The
> service is powered by MessageLabs. For more information on a proactive
> anti-virus service working around the clock, around the globe, visit:
> http://www.star.net.uk
> ________________________________________________________________________
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>




More information about the asterisk-users mailing list