Yup.. I use Endian EFW (Community), in my case, also installed under VMware. Have been using 2.2 since May and just upgraded to 2.3 yesterday. Works great. I use OpenVPN to connect remote phones so the firewall doesn't really play a role for that. I don't do too much with SipxBridge, but do have a gateway configured to connect to Acanac, a small ITSP out of Mississauga. I use them primarily for testing configurations.
By default, Endian will have the outbound firewall enabled. Don't enable the SIP proxy in Endian. All I need to do with Endian to connect to Acanac was to open up the outbound firewall (all ports, TCP/UDP) to the IP addresses Acanac provided me. When Sipx registers with Acanac, Endian automatically uses the allow established rules and creates the necessary NAT translations as ports are requested... That was it for me.. Dave B. From: [email protected] [mailto:[email protected]] On Behalf Of Tony Graziano Sent: October 29, 2009 6:09 AM To: Picher, Michael Cc: sipx-users Subject: Re: [sipx-users] sipxecs behind endian firewall Just to save you some trouble, Endian does not do symmetric nat at all. Symmetric NAT § Each request from the same internal IP address and port to a specific destination IP address and port is mapped to a unique external source IP address and port. § If the same internal host sends a packet even with the same source address and port but to a different destination, a different mapping is used. § Only an external host that receives a packet from an internal host can send a packet back. It can do SNAT, nut this is not souce based NAT, it is softwires nat, which is used for encapsulation. Replacing it would be your best option. It it matter, pfsense has a vmware loadable image you can use, and is very easy on system resources. On Thu, Oct 29, 2009 at 4:08 AM, Picher, Michael <[email protected]> wrote: I have not tested that firewall personally. As a general rule however, you would want to make sure and disable the sip proxy in endian. Mike -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Francis Tinio Sent: Thursday, October 29, 2009 3:00 AM To: sipx-users Subject: [sipx-users] sipxecs behind endian firewall Hi. >From a previous topic I wa having, it seems that endian might be a cuplrit with sipx working behind an endian firewall. unfortunately for me, I'm in no position to replce the firewall right now as it will be more work to change. has anyone been able to get sipx to work behind endian firewall? any pointers? did you enable sip proxy in endian fw? thanks in advance. francis _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/ _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/ -
_______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
