[Asterisk-Users] Shorewall Configuration for Asterisk Box

Samy Antoun samyantoun at yahoo.com
Sat Jun 11 10:56:51 MST 2005


Hi,

I've an Asterisk box acting as firewall with
Shorewall, yet I can't get a SIP client (Sipura 2000)
to connect remotely (behind a firewall). My Shorewall
Config as follows:

interfaces
#ZONE INTERFACE BROADCAST OPTIONS
net   eth0      detect   
dhcp,routefilter,norfc1918,tcpflags
loc   eth1      detect    tcpflags

zones
#ZONE DISPLAY COMMENTS
net   Net     Internet
loc   Local   Local Networks

policy
#SOURCE DEST POLICY LOGLEVEL
loc     net  ACCEPT
fw      net  ACCEPT
net     all  DROP   info
all     all  REJECT info

rules
#ACTION SOURCE DEST PROTO DESTPORT
ACCEPT  fw     net  tcp   53
ACCEPT	fw     net  udp   53
ACCEPT  loc    fw   tcp   22
ACCEPT  loc    fw   icmp  8
ACCEPT  net    fw   icmp  8
ACCEPT  fw     loc  icmp	
ACCEPT  fw     net  icmp	
ACCEPT  net    fw   udp   10000:20000
ACCEPT  net    fw   udp   5060
ACCEPT  net    fw   tcp   5060
ACCEPT  net    loc  udp   5060
ACCEPT  net    loc  tcp   5060
ACCEPT  net    fw   udp   4569
ACCEPT  net    fw   tcp   4569
ACCEPT  loc    fw
ACCEPT  fw     loc
DNAT    net    loc:192.168.1.10 tcp http

masq
#INTERFACE SUBNET
eth0       eth1

Also, I'm trying to find any documentation for
"shorewall logwatch" command.

Any help is heighly appreciated.
Regards.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 



More information about the asterisk-users mailing list