Martin Tomczyk <[email protected]> wrote:

> In your case I would try this:
> Asterisk provides support for SIP Session Timers (RFC 4028) through 
> parameters in sip.conf. It provides a keep-alive mechanism. However, they 
> quite often don't work properly and cause calls to drop. The simplest fix is 
> to disable them with "session-timers=refuse".

That was an interesting quote.
Surely the "fix" is to explicitly forward all ports used by the internal 
Asterisk server. That way, if a re-invite appears after some time, it'll get 
passed through by the port forwarding rules and problem gone.

How "safe" this is depends on the situation. If the Asterisk server only talks 
to specific addresses (ie a VoIP trunk provider) then you can restrict the 
addresses and avoid the problems of having open SIP ports. I don't recommend an 
open SIP port - you **WILL** suffer hack attempts, at work we've seen 1Mbps or 
more of register packets trying to brute-force an account.


------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.
Get unparalleled scalability from the best Selenium testing platform available
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to