[Asterisk-Users] PIX Firewall Ports and Access-Lists

Geoff Manning gmanning at zoom.com
Sat Jun 18 08:41:31 MST 2005


OK, I found the command:

access-list acl-prod permit udp any host EXTERNAL_*_IP_HERE range 10000
20000

Unfortunately that doesn't help my intermittent audio issue as I had hoped.

When I view the access list, that rule doesn't report any hits so I'm not
sure it is being used.

Any suggestions as to port forwarding the correct ports through our PIX and
if that has an effect on my audio issues? We have old firmaware that has a
bug in the SIP Fixup so it has been turned off. Could that be the issue? 

-----Original Message-----
From: Geoff Manning
To: Asterisk Users (E-mail)
Sent: 6/17/05 1:29 PM
Subject: [Asterisk-Users] PIX Firewall Ports and Access-Lists

Hello,

I am not too familiar with the settings in our PIX (learning though).

Here is the only access-list setting that we have in place for Asterisk:

access-list acl-prod permit udp any host EXTERNAL_*_IP_HERE eq 5060

In rtp.conf we are allowing ports 10000 - 20000.

We are not using SIP Fixup in our PIX due to firmware version.

How do I go about adding the ability for udp ports 10000 - 20000 to
forward
to our Asterisk server?

We have intermittent audio issues on calls and I have narrowed it down
(hopefully) to the PIX.

Thanks!
_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users



More information about the asterisk-users mailing list