Port Forwarding misconception
Submitted by majamer on Mon, 06/02/2008 - 3:56pm.
There are alot of confusing posts about port forwarding in trixbox:
- 5060 -5072: WRONG can you point me to source code in trixbox that requires forwarding this block of ports for SIP? AFAIK, 5060 TCP is the only port needed for SIP signaling, if you think this is wrong, would you please have the courtesy to support your point with the Asterisk/trixbox source code?
- RTP: 10001-20000: WRONG. Webmin uses TCP 10000, however RTP uses UDP 10000-20000. Plesse don't confuse UDP and TCP ports. You don't even need to forward all fo these ports, just two ports per active channel (if you expect that 10 is the maximum number of simultaenous channels that your system will ever open, then open UDP 10000 - 10000+(2*10) and forward them to your trxibox internal IP
- 4569 UDP is the only port required by IAX2 singaling.
*Please* correct me if I'm wrong. Any other secret ports that we don't know of?? This is technology not the Book of Prophets!!
ports
Mon, 06/02/2008 - 5:10pm
HUH.. the forwarding ports has nothing to do with TB code.
And so you know there are SIP providers who use ports other than 5060
And many folks with more than a single SIP ATA behind some CHEAP SoHo routers NEED the added SIP ports forwarded.
as for the range of UDP ports opened.. So what i someone opens more than the number of calls it is no more a security issue than just one open port.
So what is the point of this post???
5060 UDP for SIP - Asterisk does not YET support SIP over TCP
Mon, 06/02/2008 - 8:59pm
Reference Here:
http://safari.oreilly.com/0596009623/asterisk-CHP-4-SECT-6
As far as the RTP ports for the Audio Stream, 10K through 20K is way too large a range, and for no reason - even when working with SIP trunking providers that say they REQUIRE the full range of 10K-20K, I always set my system in /etc/asterisk/rtp.conf to use something like 6000-6500 or whatever - the sessions are always negotiated, and when my system asks for that range, I always get it from the providers I use (Bandwidth.com and Voxitas so far).
The tone of your post is somewhat strange - looking for a fight over what ports to open will probably not get you many takers.
Perhaps some Asterisk Angst you are trying to work through over what ports you have open?
Greg
Member Since:
2007-08-29