[Asterisk-Users] OT: SIP aware firewalls?

[Michael Graves]

On Thu, 5 Jan 2006 17:57:47 +0100, Erwin de Raad wrote:

>>
>> You should be able to run SIP through m0n0wall quite happily - we have a
>> number of client sites with SIP phones offsite which connect to the *
>server
>> behind a m0n0wall box. You'll need to allow 5060 (UDP) for SIP, then an
>> appropriate port range (as definted in rtp.conf) for the RTP streams.
>>
>> You'll obviously also need to apply any QoS rules to both the SIP and RTP
>> streams.
>>
>
>Totally agree. I moved from Kerio WinRoute (claims to be SIP aware > not) to
>Monowall and all SIP/NAT issues went away.
>It doesn't do QoS but you can do bandwith/traffic shaping which also should
>work fine.
>

Surely there's something more to the truly SIP-aware device, such as
the Ingate IX66, that merits their use in some specific circumstances?

I truly love my m0n0wall. It's been 100% solid and totally managable,
even for a relative novice such as myself. I don't generally have
problems with getting the mechanics of SIP setup through m0n0. But I
thought that there must be some advantage to the proxy services
provided in SIP aware devices or they simply wouldn't exist.

I know that I can stay with m0n0. The question still stands; are there
circumstances when something more is required? Would something be
gained by such a migration.

Michael

--
Michael Graves                           mgraves at pixelpower.com
Sr. Product Specialist                          www.pixelpower.com
Pixel Power Inc.                                 mgraves at mstvp.com

o713-861-4005
o800-905-6412
c713-201-1262
fwd 54245