Shamus,
Since you have two NICs and you want Asterisk to bind to both (WAN and
LAN), use the address 0.0.0.0 for the value of bindaddr. I believe this is
the default anyway, and it will bind to all interfaces. When you use this,
it doesn't matter if your IP address changes.
You can use the built in firewall to specify what ports are available on
the WAN interface and block all but 5060UDP and the RTP range.
-James
On Mon, Jan 16, 2012 at 9:18 AM, Shamus Rask <[email protected]> wrote:
> I'm looking for advice on how to best manage a multi-NIC server. My
> current AstLinux box has 2 NICs; I would like to do the following and would
> appreciate any guidance/suggestions:
>
> NIC 1 - WAN
> - PPPoE based
> - used only for SIP trunk to provider
> - only ports to be opened are 5060 + RTP ports
> - deploy firewall on this port
>
> NIC 2 - LAN
> - DHCP based
> - used for on-net phones (mixture of SIP, IAX and UNISTIM)
> - ssh access to box
> - web-access
>
> Looking in Asterisk I see there is a "bindaddr" command for both SIP.conf
> and IAX.conf. I don't see anything similar for the UNISTIM file. Is there a
> broader .conf file that could control this?
>
> For the WAN port, how do I bindaddr when my ISP can and does change my
> external IP periodically?
>
> cheers,
> Shamus
>
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Mar 27 - Feb 2
> Save $400 by Jan. 27
> Register now!
> http://p.sf.net/sfu/rsa-sfdev2dev2
> _______________________________________________
> Astlinux-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
> [email protected].
>
------------------------------------------------------------------------------
RSA(R) Conference 2012
Mar 27 - Feb 2
Save $400 by Jan. 27
Register now!
http://p.sf.net/sfu/rsa-sfdev2dev2
_______________________________________________
Astlinux-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
[email protected].
