<html><head><style type='text/css'>body { font-family: 'Times New Roman'; font-size: 12pt; color: #000000}</style></head><body>You can also create the vpn using the existing pix and netgear, eliminating more hardware and points of failure.<br><br>----- Original Message -----<br>From: "Ricardo Carvalho" <rjcarvalho.lists@gmail.com><br>To: "Asterisk Users Mailing List - Non-Commercial Discussion" <asterisk-users@lists.digium.com><br>Sent: Tuesday, November 27, 2007 7:30:35 AM (GMT-0800) America/Los_Angeles<br>Subject: Re: [asterisk-users] Asterisk behind a PIX firewall?<br><br>Try to just open port 5060 for SIP signaling on the PIX and also enable
the INSPECT SIP rule. That way, your PIX firewall will inspect SIP
signalling and open the necessary UDP ports for the RTP.<br><br>If you
have NAT uptream in the network, you should see if in the layer 4 the
IPs shown in the SIP messages got rewritten by its public IPs, it
should have, or else you'll never get it working right.<br><br><br>Regards,<br>Ricardo Carvalho.<br>
</body></html>