So, do the same setup with the DNS, setup a colocated machine and your asterisk inside the LAN registers with it, in your dialplan instead of:<br><br>exten => 123,1,Dial(SIP/123,25,r)<br>exten => 123,2,VoiceMail(u123)
<br><br>Do:<br><br>exten => 123,1,Dial(SIP/123,25,r)<br>exten => 123,2,Dial(IAX2/colocation-asterisk/${exten},r)<br>exten => 123,3,VoiceMail(u123)<br><br>And on the colocation don't do any sort of voicemail.<br>
<br>Since if you are inside the LAN the DNS would point to the asterisk in the lan and outside it would point to the colocated machine, it should ease the security concerns you have and also provide the same functionality, you can plug in the phone anywhere and it will work just the same.
<br><br>You will require some testing/tweaking however to insure every possible senario works (IE: Calls between 2 phones conected to the colocation asterisk)<br><br><div><span class="gmail_quote">On 1/12/07, <b class="gmail_sendername">
Andy Hester</b> <<a href="mailto:ahester@architel.com">ahester@architel.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Andrew,<br><br>Thanks, for the response. That is a very clean solution and much less work/complication, however, I am not sure that the security guy for this network will allow me to put up the asterisk box dual homed to the public IP and the LAN. If there is not another feasible way then I may end up going with this anyway. Any other feasible ways to accomplish this?
<br><br><br>Sorry for the top post... Having to use Outlook for the moment.<br><br>Thanks,<br>Andy Hester<br><br>________________________________________<br>From: <a href="mailto:asterisk-users-bounces@lists.digium.com">asterisk-users-bounces@lists.digium.com
</a> [mailto:<a href="mailto:asterisk-users-bounces@lists.digium.com">asterisk-users-bounces@lists.digium.com</a>] On Behalf Of Andrew Joakimsen<br>Sent: Friday, January 12, 2007 9:57 AM<br>To: Asterisk Users Mailing List - Non-Commercial Discussion
<br>Subject: Re: [asterisk-users] Suggestion for a new asterisk setup.<br><br>I assume there is one NAT router for the LAN and nothing fancy, so setup the Asterisk machine on the router/firewall (or make it such) and have it listen on both LAN and WAN interface.
<br><br>Now use a hostname for the SIP server, and run a DHCP/DNS server that will resolve that hostname to the LAN IP address of your router, when it is queried from the LAN side, when from the WAN side it would just be the regular lookup (use FQDN).
<br><br>Now phones will work from anywhere, no NAT issues to deal with at all. Each interface that asterisk runs on is isolated from the other.<br>_______________________________________________<br>--Bandwidth and Colocation provided by
<a href="http://Easynews.com">Easynews.com</a> --<br><br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users
</a><br></blockquote></div><br>