Any traffic that crosses between zones needs rules. From memory, traffic from green is always allowed to blue/orange. The way back, however, will need to be allowed for incoming packets from the Asterisk server to ring the phones (not 100% sure on this one, though). -- Rafael Fonseca www.nunca.com.br
On 9/02/2010, at 10:17 PM, Vassilis V. wrote: > Thank you for the fast answer Rafael! > > If its in the orange zone do softphones and IP Phones over VPN in the > green zone work directly or do I need to make rules in the inter-zone > firewall to allow certain ports from orange to green? > > Thank you! > > > Rafael Fonseca wrote on 08.02.2010 22:57: >> Green if it's supposed to be an internal PBX server. Orange if it's >> supposed to be a public one. >> -- >> Rafael Fonseca >> www.nunca.com.br <http://www.nunca.com.br> >> >> >> On 9 February 2010 10:43, Vassilis V. <bigracc...@gmx.net >> <mailto:bigracc...@gmx.net>> wrote: >> >> Hello all, >> >> I successfully managed to get an Asterisk running behind my Endian >> firewall. All installation/configuration was done while in the green >> zone so I have as little network configuration needed as possible while >> setting it up. >> >> Now thats its all working, my question is, what zone is the ideal one >> for an asterisk server? Where do you guys/gals have yours and why? >> >> Thank you for your time! >> >> >> ------------------------------------------------------------------------------ >> The Planet: dedicated and managed hosting, cloud storage, colocation >> Stay online with enterprise data centers and the best network in the >> business >> Choose flexible plans and management services without long-term >> contracts >> Personal 24x7 support from experience hosting pros just a phone call >> away. >> http://p.sf.net/sfu/theplanet-com >> _______________________________________________ >> Efw-user mailing list >> Efw-user@lists.sourceforge.net <mailto:Efw-user@lists.sourceforge.net> >> https://lists.sourceforge.net/lists/listinfo/efw-user >> >> >> >> >> ------------------------------------------------------------------------------ >> The Planet: dedicated and managed hosting, cloud storage, colocation >> Stay online with enterprise data centers and the best network in the business >> Choose flexible plans and management services without long-term contracts >> Personal 24x7 support from experience hosting pros just a phone call away. >> http://p.sf.net/sfu/theplanet-com >> >> >> >> _______________________________________________ >> Efw-user mailing list >> Efw-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/efw-user > > ------------------------------------------------------------------------------ > The Planet: dedicated and managed hosting, cloud storage, colocation > Stay online with enterprise data centers and the best network in the business > Choose flexible plans and management services without long-term contracts > Personal 24x7 support from experience hosting pros just a phone call away. > http://p.sf.net/sfu/theplanet-com > _______________________________________________ > Efw-user mailing list > Efw-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/efw-user ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user