[asterisk-users] Asterisk and Deutsche Telekom

[jg]

> I think there are many german users in this ML, that use Asterisk with the
> new line of Deutsche Telekom (Magenta Zuhause).
>
> My ISDN will be converted in Juli (Kaboom-day at Juli, the 3rd...) and right
> now I can just hope, that I configured my Asterisk well to work with Deutsche
> Telekom, but I cannot be sure, since I can't test it...
>
> So my question: can someone using Asterisk with Deutsche Telekom contact me
> (PN), so that we can compare the sip.conf?
>
It doesn't really depend on your sip.conf and Asterisk. Your gateway/router will be the major 
problem. My summer project will be to look at session border controllers which separate the 
local PBX features from the WAN side. The most simple setup would be to use a FritzBox, which I 
think can handle SIP trunks as well. I'll try my luck with pfSense, where I'll have a look at 
Asterisk, FreeSwitch and possibly Kamailio for the telephony part. You need only basic switching 
capabilities here and the focus is on security (geo stuff, access patterns, ...) and access 
rights, possibly patching some SIP headers. It's also nice to have an intrusion detection system 
like Snort and a defined interface for packet capturing.

I have already a lot of experience with pfSense and I appreciate all the security, monitoring 
features and stability, but I don't really know whether in fall I'll have something that can be 
recommended. Anyway, my attempts to setup reliable SIP and IAX2 protocols so far failed. I 
always found workarounds, but in case of interruptions, DSL line termination, IP changes etc, I 
frequently ended up with wrong intermediate ports and failing connections with routers that I 
don't know. For me it is easier to have everything with pfSense under my own control instead of 
figuring out the peculiarities of certain NAT implementations. The worst thing that can happen 
to me is a customer with a 15 year old router I've never seen before. It is usually easier to 
say that a special router/SBC is part of the deal instead of guessing how much hassle it could 
be this time. If I look at the complexity of my routers' packet filtering, it makes definitely 
sense to separate gateway from internal functionality.

One could say that cascaded Back-to-Back-User-Agents look peculiar, but once you start to think 
about maintenance, it makes a lot of sense (to me and momentarily).

jg