If teliax ever wants to connect to your asterisk box, as in if they're
providing a DID for you, you will need to allow teliax through the firewall.
If you're the one originating the connection to them, you don't need to open
the ingress port.

> I don't believe so. By registering with the remote server, 
> you are giving them the NAT port to get back into your 
> server with. All communications will take place on that 
> port.

Registration has nothing to do with NAT.  The key here is which side
initiates the connection.  Of course this is all under the assumption that
Joseph's firewall is statefull.


**
***
****
Peter A. Sygula
President/Chief Security Officer - NetShapers, Inc.
< http://www.net-shapers.com  >

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert Webb
Sent: Friday, November 18, 2005 3:51 PM
To: [email protected]; [EMAIL PROTECTED]
Subject: Re: [Asterisk-Users] IAX and Firewall


On Fri, 18 Nov 2005 14:20:45 -0700
  Joseph <[EMAIL PROTECTED]> wrote:
> Do I have to have IAX2 port (udp 4569) open when 
>receiving calls from a
> registered server.
> My asterisk shows that it is registered with teliax 
>server but the calls
> to my asterisk are being dropped?
> 
> -- 
> #Joseph

I don't believe so. By registering with the remote server, 
you are giving them the NAT port to get back into your 
server with. All communications will take place on that 
port.

THe only time you would need to open up the firewall and 
direct the port to your server would be if you have a user 
on the outside that is registering back into your Asterisk 
box.

I know someone will correct me if I am wrong, but I 
believe that is the way it works. You have to forward 
ports for SIP because of the way the RTP stream is setup.

Robert Webb
_______________________________________________
--Bandwidth and Colocation sponsored by Easynews.com --

Asterisk-Users mailing list
[email protected]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

_______________________________________________
--Bandwidth and Colocation sponsored by Easynews.com --

Asterisk-Users mailing list
[email protected]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to