Re: [asterisk-users] Which router/firewall would you use for a virtual-PBX Asterisk installation?

2015-11-23 Thread Ernie Dunbar
Oh, don't worry about us going cheap on security. We use A2Billing (along with some Fail2Ban configuration for bad logins) to limit the number and cost of calls that can go out through a compromised SIP account, so that when, not *if*, a customer's SIP account gets compromised, the attacker

Re: [asterisk-users] Which router/firewall would you use for a virtual-PBX Asterisk installation?

2015-11-23 Thread Telium Technical Support
If you are focused on routing, we've used 4 Cisco SG300-28p in router mode - economical way to handle vlans etc for ~100 POE phone sets, (with GB interconnects). At the edge Cisco ASA-55xx work well, and we've done a few deployments with Mikrotik routers that are quite inexpensive and performed

[asterisk-users] How exactly does asterisk know what IP to send RTP traffic to?

2015-11-23 Thread Kevin Long
Hello, I have a somewhat confusing use case. We use a mobile voip app and our users connect to our PBX via a public IP of our firewall which port forwards to asterisk (TLS and SRTP ports). Works fine. Sometimes however, our users are also connected to our VPN (LT2P/Ipsec) which is served

Re: [asterisk-users] How exactly does asterisk know what IP to send RTP traffic to?

2015-11-23 Thread Duncan Turnbull
HI Kevin Is your VPN set as a localnet? The externip only tends to cope with the firewall address. If you put the VPNs in the localnet lists then it won't use NAT to find them. In answer to your question, the SIP session description in the call setup has the IP for media for both parties,