[asterisk-users] Asterisk behind a PIX firewall?

[Wendell Hamilton]

You can also create the vpn using the existing pix and netgear, eliminating more hardware and points of failure. 

----- Original Message ----- 
From: "Ricardo Carvalho" <rjcarvalho.lists at gmail.com> 
To: "Asterisk Users Mailing List - Non-Commercial Discussion" <asterisk-users at lists.digium.com> 
Sent: Tuesday, November 27, 2007 7:30:35 AM (GMT-0800) America/Los_Angeles 
Subject: Re: [asterisk-users] Asterisk behind a PIX firewall? 

Try to just open port 5060 for SIP signaling on the PIX and also enable the INSPECT SIP rule. That way, your PIX firewall will inspect SIP signalling and open the necessary UDP ports for the RTP. 

If you have NAT uptream in the network, you should see if in the layer 4 the IPs shown in the SIP messages got rewritten by its public IPs, it should have, or else you'll never get it working right. 


Regards, 
Ricardo Carvalho. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20071127/c71b3bca/attachment.htm