On Wed, Nov 19, 2008 at 11:24 AM, Mikel Lindsaar <[EMAIL PROTECTED]> wrote: > On Thu, Nov 20, 2008 at 1:44 AM, marrandy <[EMAIL PROTECTED]>wrote: > >> On Wednesday 19 November 2008 09:07:31 you wrote: >> > > OpenBSD PF firewall consisting of ext, DMZ, internal/private >> interfaces. >> > > VOIP server sitting in the DMZ. >> > > Multiple (pick any number, 5, 10, 100) SIP phones in the private LAN. >> > > Multiple mobile (pick any number, 5, 10, 100) SIP phones anywhere in >> the >> > > USA. (NOTE: Mobile means they are carried and plugged in anywhere, but >> > > are programmed with the static IP gateway address. >> > > >> > > How would you create a working pf.conf file so everything 'just >> works'. >> Sounds like a lot of work. I need to go and hit the asterisk list. >> >> I'll let you know if I find anything out. > > > FWIW I run about 8 asterisk servers behind openbsd firewalls. I have found > the most non-problematic way to run them has been by using the asterisk > servers as a SIP proxy for your SIP clients and making sure that canreinvite > in asterisk is turned off, this increases your load on the asterisk server, > but I haven't found that to be a real problem.
sounds like a great article for undeadly.org! :)
