Peter, thanks for the quick reply. > If you want to do something like whitelist connections to port 5269 (or > whatever you decide to use for s2s), you might need to do that at the firewall > level, not the application level.
Yes, I thought of that, but IIRC after a connection is initiated, the daemon does a dialback validation; the initial connection would be OK with the RELATED,ESTABLISHED but then I think dialback validation would get blocked (although I haven't tested this). Does this follow what you know of how s2s behaves? Mike Humphries-Dolnick Unix Server Services for CS/CCD/ESO Phone: (630) 840-4135
