On Sun, Jan 3, 2010 at 9:14 PM, Nicholas Blasgen <[email protected]> wrote: > I'm trying to move my Asterisk deployments under a Virtual IP address and > now remember why I dislike this. My primary Asterisk system is now behind a > firewall in private address space. My question is what ports are needed to > be opened just for the purpose of placing outgoing calls. I would have > assumed none, but I can't even get replies on registration from any of my 3 > VoIP providers. I tried defining the External IP and some other stuff, but > I assume it's fully an issue with the firewall. Do I really need 5060 port > forwarded just to register with remote hosts?
Each NAT device likes it differently. I usually do the following: 1. Forward udp:5060 (SIP) 2. Forward udp:10000-20000 (RTP) 3. Setup sip.conf so that asterisk knows it's behind nat (externalip, localnet and sip=yes) Depending on how fancy your device is, I usually have to turn off all app level stuff meant for sip. Linksys calls it ALG, Sonicwall something else etc. I haven't played with 1.4 or 1.6 yet, only 1.2 so I am not really sure what needs to be done on the other versions, but I'm assuming it's all the same. > > Nicholas Blasgen > Partner / Network Operations > Refractive Dialer LLC > (724) 252-7436 > > _______________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users > _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
