Totally agree *IF* the SIP elements behind your "router/firewall" have real
IP addresses and you are not using NAT in your router.

With NAT scenarios, I prefer to have a copy of Asterisk running on
"firewall/NAT router" so it at least has one public IP address to make
various SIP games a little easier.

iptables can really protect asterisk from uninvited (npi) SIP / RTP packets
if you are really paranoid

also the asterisk running on your "firewall/NAT router" can be dedicated to
just gateway functions and have your important and private asterisk pbx
behind the NAT/firewall using the gateway as needed




On 10/10/07, Steve Prior <[EMAIL PROTECTED]> wrote:
>
>
>
> Repeat after me - NEVER NEVER NEVER run other servers on your
> router/firewall machine!!!
>
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to