Re: [Astlinux-users] firewall rules for EXT -> Local

2015-04-13 Thread Lonnie Abelbeck
Shamus, If you want "auto-magic" addition of the NAT firewall rules, possibly if the SIP phones supported some sort of Universal Plug-n-Play like NAT-PMP then you could enable NAT-PMP in AstLinux, but you would still need to know what the WAN port number was for each phone, so this probably won

Re: [Astlinux-users] firewall rules for EXT -> Local

2015-04-13 Thread Shamus Rask
Thanks for the responses. I tried Lonnie’s suggestion adding the NAT rules and it worked. I was hoping for something more elegant. Just wondering if the following would be possible… On my LAN (192.168.10.0/24) I have an existing Ubuntu-based server. This is on the same subnet that AstLinux see

Re: [Astlinux-users] firewall rules for EXT -> Local

2015-04-13 Thread Michael Knill
And another option which is what I use is SSH Tunnelling. Use SSH Keys and in user.conf set SSHDPORT=“” and SSHDROOT=“No” in user.conf. You can tunnel to any device on the network. So simple. No need to establish VPN connections. No problems with overlapping IP ranges and a single firewall rule.

Re: [Astlinux-users] firewall rules for EXT -> Local

2015-04-13 Thread Lonnie Abelbeck
Hi Shamus, One method would be to manually add Firewall Rules for each SIP phone (example): -- NAT EXT->LAN TCP Source: 0/0 8010 Destination: 192.168.5.10 80 NAT EXT->LAN TCP Source: 0/0 8011 Destination: 192.168.5.11 80 ...etc for each phone -- (of course use any NAT'ed port numbers you wish) Th

[Astlinux-users] firewall rules for EXT -> Local

2015-04-13 Thread Shamus Rask
Running the latest version of AstLinux on a box with 2x Ethernet ports. Eth0 is my external interface and I’ve assigned a static IP, this sits on my LAN. Eth1 is the local port and serves as DHCP/DNS server for all my SIP phones. These are assigned an address in the 192.168.5.0/24 range and are