[Asterisk-Users] IAX and Firewall

[Piotr A. Sygula]

If teliax ever wants to connect to your asterisk box, as in if they're
providing a DID for you, you will need to allow teliax through the firewall.
If you're the one originating the connection to them, you don't need to open
the ingress port.

> I don't believe so. By registering with the remote server, 
> you are giving them the NAT port to get back into your 
> server with. All communications will take place on that 
> port.

Registration has nothing to do with NAT.  The key here is which side
initiates the connection.  Of course this is all under the assumption that
Joseph's firewall is statefull.


**
***
****
Peter A. Sygula
President/Chief Security Officer - NetShapers, Inc.
< http://www.net-shapers.com  >

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Robert Webb
Sent: Friday, November 18, 2005 3:51 PM
To: asterisk-users at lists.digium.com; syscon at interbaun.com
Subject: Re: [Asterisk-Users] IAX and Firewall


On Fri, 18 Nov 2005 14:20:45 -0700
  Joseph <syscon at interbaun.com> wrote:
> Do I have to have IAX2 port (udp 4569) open when 
>receiving calls from a
> registered server.
> My asterisk shows that it is registered with teliax 
>server but the calls
> to my asterisk are being dropped?
> 
> -- 
> #Joseph

I don't believe so. By registering with the remote server, 
you are giving them the NAT port to get back into your 
server with. All communications will take place on that 
port.

THe only time you would need to open up the firewall and 
direct the port to your server would be if you have a user 
on the outside that is registering back into your Asterisk 
box.

I know someone will correct me if I am wrong, but I 
believe that is the way it works. You have to forward 
ports for SIP because of the way the RTP stream is setup.

Robert Webb
_______________________________________________
--Bandwidth and Colocation sponsored by Easynews.com --

Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users