run tcpdump, while trying to connect to asterisk to see what ports are requiered.<div><br>default SIP port is UDP 5060, but as mentioned before all your traffic should go over VPN so port openening shouldn't be a problem</div>
<div><br></div><div><br><div><br><div class="gmail_quote">On Wed, May 27, 2009 at 8:40 AM, Marco Sambo <span dir="ltr"><<a href="mailto:derwidtel@gmail.com">derwidtel@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Ok,<br>but if I want to open only SIP port on firewall, which ones? I have the following situation:<br><br>computer A (softphone) -------- firewall -------- computer B (asterisk)<br><br>and I dont' want to open any ports, only SIP and voice.<br>
<br><br><br><br><div class="gmail_quote">2009/5/26 David Gibbons <span dir="ltr"><<a href="mailto:dave@videon-central.com" target="_blank">dave@videon-central.com</a>></span><br><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex">
<div><div></div><div class="h5">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p><span style="font-size:11pt;color:rgb(31, 73, 125)">Assuming you mean the firewall in front of the client, you don’t
need to open any ports as long as the VPN client is tunneling all traffic to
and from the Asterisk server. </span></p>
<p><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span></p>
<p><span style="font-size:11pt;color:rgb(31, 73, 125)">I set NAT=yes in the config file for the extensions behind a
VPN.</span></p>
<p><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span></p>
<p><span style="font-size:11pt;color:rgb(31, 73, 125)">-Dave</span></p>
<p><span style="font-size:11pt;color:rgb(31, 73, 125)"> </span></p>
<div style="border-style:solid none none;border-color:rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color;border-width:1pt medium medium;padding:3pt 0in 0in">
<p><b><span style="font-size:10pt">From:</span></b><span style="font-size:10pt"> <a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a>
[mailto:<a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a>] <b>On Behalf Of </b>Marco
Sambo<br>
<b>Sent:</b> Tuesday, May 26, 2009 11:21 AM<br>
<b>To:</b> <a href="mailto:asterisk-users@lists.digium.com" target="_blank">asterisk-users@lists.digium.com</a><br>
<b>Subject:</b> [asterisk-users] SIP over VPN</span></p>
</div><div><div></div><div>
<p> </p>
<p>Hi all,<br>
I have a question. I have a VPN and I want to use a SIP softphone on my
notebook using with asterisk. But I have some problem with firewall and port.<br>
Someone knows which ports I should open on my firewall??? I can't connect ...<br>
<br>
Thanks all.<br>
<br>
Marco</p>
</div></div></div>
</div>
<br></div></div>_______________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br>
<br>_______________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br><br clear="all"><br>-- <br>Mvh,<br>Aurimas Skirgaila<br>
</div></div>