I thought I had a handle on the firewall settings as I had just about everything working as expected. However, after disabling hosted nat compensation on the ITSP side (my provider gives me the option to use HNC or not), I've since discovered that I didn't.
These are the ports I originally opened up: UPD 5060, 30000 - 31000 These settings worked fine if HNC was enabled on the ITSP side. However, once I disabled HNC on the ITSP side I had problems registering with the ITSP. I put the sipXecs box on the DMZ and tested with HNC disabled on the ITSP again. After doing this, registration attempts were successful, so I figured that I have at least one missing port forwarding rule. I had asked previously about port 5080, as this is the default port listed under the SBC. I think I was told that since the communication is initiated and goes out through this port that the firewall will allow it to come back in. I decided to open up this port to see if it would help and this seems to have resolved the issue. I have not had any registration issues since opening up this port. Here are the ports I currently have open: UPD 5060, 5080, 30000 - 31000 While writing this email, I noticed a difference on the ITSP registration info page. When HNC was enabled on the ITSP side, I noticed that the first registration before showed up on port 5080. However, all subsequent registrations seemed to be on a random port. Now that I've disabled HNC on the ITSP side, it is always showing that I'm registered on port 5080. This is what I had expected in the past, so I think I have it set up correctly now. Any feedback on this? I also just noticed that my ITSP shows the following under my account info for ports: SIP: 5060 UDP RTP Range: 10001-20000 UDP Although they have port 5060 listed, it appears to work just fine with 5080. They also have a different RTP Range than the default in sipXecs (30000 - 31000). Although this doesn't seem to be an issue, I thought I better make sure that I have everything configured correctly. Finally, I have heard about a possible change that will cause sipxrelay to do strict symmetric packet routing. I was wondering if I can get some feedback on this. The firewall I'm testing with is very basic and there are no options to about doing symmetric packet routing. I've done a quick google search and am a little confused. Is this an advanced feature, or should most basic firewalls do this? Thanks, Tim
_______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
