You're absolutely right. I only mention Sonicwall, because those are the ones we see most often and there is a perception out there that, because Sonicwall is the (disputed) leading firewall, it should work.
Bruce Komito WPTI Telecom (775) 236-5815 On Thu, 23 Oct 2008, Kristian Kielhofner wrote: > On 10/23/08, Bruce Komito <[EMAIL PROTECTED]> wrote: > > We've had LOTS of problems with Sonicwalls doing bad things to SIP and RTP > > connections. I've seen the delay thing, as well as the Sonicwall throwing > > away entries from the ARP table because of inactivity. I've also seen > > sporadic, intermittent problems with transfer from one phone to another. > > I have no doubt that a new, properly configured Sonicwall can be made to > > function properly in a VoIP environment, but we are not Sonicwall experts, > > nor are many of the purported experts. In every case where we've had > > problems with VoIP behind a Sonicwall, the problems ALL disappear when we > > put the phones on a LAN segment that does not pass through the Sonicwall. > > So, now that's our going in position. If it works, great, but if it > > doesn't, our solution is to take the Sonicwall out of the picture. > > > > My $.02 . > > > > Bruce Komito > > WPTI Telecom > > (775) 236-5815 > > > > I wouldn't single out SonicWalls when it comes to breaking SIP traffic. > > Most of the "anything but simple PAT" devices I've seen that implement > any SIP specific fixups usually end up breaking something along the > line. Unless the product is from a company where SIP is their core > competency (like Ingate, or /maybe/ Cisco) it's best to stay away > and/or disable the SIP specific fixups wherever possible. > > I'm looking forward to the day when SIP-TLS is the norm and these > devices have no idea what kind of traffic is flowing through them! > > -- > Kristian Kielhofner > http://blog.krisk.org > http://www.submityoursip.com > http://www.astlinux.org > http://www.star2star.com > > _______________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users > _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
