[asterisk-users] problems with natted phones

[Marek Greško]

There are other systems running on the same hardware. It would just
leave open ports here.

Do not compare SIP ALG on a closed source device to an opensource
software with active development. I had no such problems in the past
when using iptables. The nftables is a pretty new software, so some
bugs could be present and I accept. I just wanted to be sure I am not
doing anything wrong. Now I am pretty sure it is a bug.

Thanks

Marek


2021-09-09 18:30 GMT+02:00, Administrator <admin at tootai.net>:
>
> Le 09/09/2021 à 18:15, Marek Greško a écrit :
>> There is always some risk. If there is a solution that should work, it
>> is best to use it. We just need the root cause, why it fails
>> sometimes.
>
> Like SIP ALG ? ;) Please explain which risk are existing if there is
> nothing listening on those ports ?
>
>>
>>
>> 2021-09-09 18:01 GMT+02:00, Antony Stone
>> <Antony.Stone at asterisk.open.source.it>:
>>> On Thursday 09 September 2021 at 17:56:10, Marek Greško wrote:
>>>
>>>> Hello,
>>>>
>>>> I would not like to open whole range of udp ports for rtp.
>>> Why not?  What is the risk?
>>>
>>> What would possibly be listening on UDP ports 10000 - 20000 (the Asterisk
>>> default range) which an external scanner / attacker could make use of?
>
> --
> Daniel
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>       https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users