On Sat, 2008-09-13 at 12:48 -0400, Chris Buechler wrote:
> On Sat, Sep 13, 2008 at 11:22 AM, sp4rc <[EMAIL PROTECTED]> wrote:
> > Hello list members
> >
> > I am running 1.2-RELEASE embedded on an alix2d3 board.
> >
> > This is what my network layout looks like:
> > http://img257.imageshack.us/my.php?image=networkgu3.jpg
> >
> > The Linksys router is running in "router-mode" and does no packet
> > filtering at all.
> >
> > DMZ rules (pass):
> > proto   src     port    dest    port            descr
> > UDP     *       *       *       3478 - 3479     STUN
> > UDP     *       *       *       5000 - 5100     SIP
> > TCP     *       *       *       554             RTSP
> > UDP     N95     *       *       1024 - 65535    RTP data
> >
> > I am able to call [EMAIL PROTECTED] which is a test number, but calling
> > some "real" number results in a ringing tone, afterwards the called
> > person answers the phone and the connection to the sipgate gateway gets
> > lost... I am aware about the sipproxy packet for the full installation,
> > but is there some alternative for the embedded installation?
> >
> > Am I missing anything within my rules? natting? I see a bunch of
> > requests to random dest ports being made from sipgate after initiating a
> > voip call... the odd thing is, it has been working with this set of
> > rules for a few times...
> >
> 
> Probably need static port.  http://doc.pfsense.org/index.php/Static_Port

Thanks for your reply. I changed the Natting configuration. A first test
I have made yesterday worked. But today I can not log in to my sipgate
account anymore from the DMZ segment. (Although it works using ekiga
from the LAN segment, to exclude a sipgate/account problem). 

The firewall blocks a bunch of udp port accesses from 217.10.77.24 which
seems to belong to sipgate. Do I need to forward this ports?

Sep 14 12:43:43 WAN 217.10.77.24:59713 84.xx.xx.xx:5003 UDP

Sep 14 12:43:39 WAN 217.10.77.24:59712 84.xx.xx.xx:5002 UDP

This seems to become a trial-and-error job. I hardly cant find anything
about the ports being issued. Any links? Is there really no way to
install a sip proxy on the embedded installation?




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to