Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Gary Kuznitz
Thank you very much for the reply.

On 2 Dec 2010 at 17:06, Steve (Steve Edwards ) 
commented about Re: [asterisk-users] Asterisk ports:

> On Thu, 2 Dec 2010, Gary Kuznitz  wrote:
> 
> > You get extra points today.  I think you found where the problem is. It 
> > found /etc/asterisk/sip.conf Warning parse error: No category context 
> > for line 1 of /etc/asterisk/sip.conf Unable to load config sip.conf.
> >
> > This is what is in sip.conf.
> > [authentication]
> >
> > [general]
> > context = default
> > allowoverlap = no
> > bindport = 5060
> > bindaddr = 0.0.0.0
> > srvlookup = yes
> > limitonpeers = yes
> > allow = all
> > allowguest=yes
> 
> Running out of clues here :)
> 
> I can load the above fine in my 1.2 instance. Any chance the file was 
> edited on Windows and needs to be 'unixfied?'
> 
> What does 'hexdump -C sip.conf' look like?
> 
> Does commenting (';') out line 1 change anything?

This fixed the problem.  There was some garbage in line 1.
You are great.  Thank you very much.

Gary

> -- 
> Thanks in advance,
> -
> Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
> Newline  Fax: +1-760-731-3000



-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Steve Edwards
> On Thu, 2 Dec 2010, Gary Kuznitz  wrote:
>
>> You get extra points today.  I think you found where the problem is. It
>> found /etc/asterisk/sip.conf Warning parse error: No category context
>> for line 1 of /etc/asterisk/sip.conf Unable to load config sip.conf.
>>
>> This is what is in sip.conf.
>> [authentication]
>>
>> [general]
>> context = default
>> allowoverlap = no
>> bindport = 5060
>> bindaddr = 0.0.0.0
>> srvlookup = yes
>> limitonpeers = yes
>> allow = all
>> allowguest=yes
>
> Running out of clues here :)

Another thought...

Asterisk can be started with a command line option that specifies the path 
to it's configuration file. The default is /etc/asterisk/asterisk.conf.

Does 'ps -aef | grep asterisk' show the '-C' option being used?

Also, Asterisk's configuration file can specify where ('astetcdir') it 
should look for sip.conf.

I use these feature to keep each of my client's configuration files in 
separate directories, but all on the same development box.

-- 
Thanks in advance,
-
Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
Newline  Fax: +1-760-731-3000

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Steve Edwards
On Thu, 2 Dec 2010, Gary Kuznitz  wrote:

> You get extra points today.  I think you found where the problem is. It 
> found /etc/asterisk/sip.conf Warning parse error: No category context 
> for line 1 of /etc/asterisk/sip.conf Unable to load config sip.conf.
>
> This is what is in sip.conf.
> [authentication]
>
> [general]
> context = default
> allowoverlap = no
> bindport = 5060
> bindaddr = 0.0.0.0
> srvlookup = yes
> limitonpeers = yes
> allow = all
> allowguest=yes

Running out of clues here :)

I can load the above fine in my 1.2 instance. Any chance the file was 
edited on Windows and needs to be 'unixfied?'

What does 'hexdump -C sip.conf' look like?

Does commenting (';') out line 1 change anything?

-- 
Thanks in advance,
-
Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
Newline  Fax: +1-760-731-3000

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Gary Kuznitz
Thanks for the reply.

On 2 Dec 2010 at 15:57, Steve (Steve Edwards ) 
commented about Re: [asterisk-users] Asterisk ports:

> On Thu, 2 Dec 2010, Steve Edwards wrote:
> 
> >> What does 'sip show settings' show? The first 2 settings (1.6.2.5) should
> >> be:
> >>
> >>UDP SIP Port:   5060
> >>UDP Bindaddress:0.0.0.0
> 
> On Thu, 2 Dec 2010, Gary Kuznitz  wrote:
> 
> > In sip.conf bindport = 5060
> >
> > 'Sip show settings' doesn't work in 1.4.22
> 
> I don't have access to a '1.4' instance right now, but 'sip show settings' 
> works in 1.2 and 1.6 so I'm guessing it should work in 1.4 as well.
> 
> You may have an error that prevents the SIP channel driver from loading. 
> What do you get with 'unload chan_sip.so' followed by 'load chan_sip.so'?

You get extra points today.  I think you found where the problem is.
It found /etc/asterisk/sip.conf
Warning parse error: No category context for line 1 of /etc/asterisk/sip.conf
Unable to load config sip.conf.

This is what is in sip.conf.
[authentication]

[general]
context = default
allowoverlap = no
bindport = 5060
bindaddr = 0.0.0.0
srvlookup = yes
limitonpeers = yes
allow = all
allowguest=yes 

What doesn't it like?

Thanks,

Gary

> 
> -- 
> Thanks in advance,
> -
> Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
> Newline  Fax: +1-760-731-3000
> 
> -- 
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>http://lists.digium.com/mailman/listinfo/asterisk-users



-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Steve Edwards
On Thu, 2 Dec 2010, Steve Edwards wrote:

>> What does 'sip show settings' show? The first 2 settings (1.6.2.5) should
>> be:
>>
>>UDP SIP Port:   5060
>>UDP Bindaddress:0.0.0.0

On Thu, 2 Dec 2010, Gary Kuznitz  wrote:

> In sip.conf bindport = 5060
>
> 'Sip show settings' doesn't work in 1.4.22

I don't have access to a '1.4' instance right now, but 'sip show settings' 
works in 1.2 and 1.6 so I'm guessing it should work in 1.4 as well.

You may have an error that prevents the SIP channel driver from loading. 
What do you get with 'unload chan_sip.so' followed by 'load chan_sip.so'?

-- 
Thanks in advance,
-
Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
Newline  Fax: +1-760-731-3000

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Gary Kuznitz
Thanks for the reply.

On 2 Dec 2010 at 14:11, Steve (Steve Edwards ) 
commented about Re: [asterisk-users] Asterisk ports:

> >> On Behalf Of Gary Kuznitz
> 
> >> Shouldn't Asterisk be listening on UDP port 5060?
> 
> Yes. Unless configured otherwise, that's the SIP port. It's set in 
> sip.conf.
> 
> What does 'sip show settings' show? The first 2 settings (1.6.2.5) should 
> be:
> 
>UDP SIP Port:   5060
>UDP Bindaddress:0.0.0.0

In sip.conf bindport = 5060

'Sip show settings' doesn't work in 1.4.22

I have re-booted this machine.  What else could I look for as to why UDP 5060 
isn't 
listening?

Thanks,

Gary

> unless you know what you're doing.
> 
> -- 
> Thanks in advance,
> -
> Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
> Newline  Fax: +1-760-731-3000
> 
> -- 
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>http://lists.digium.com/mailman/listinfo/asterisk-users



-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Sherwood McGowan
On Thu, Dec 2, 2010 at 4:11 PM, Steve Edwards  wrote:
>>> On Behalf Of Gary Kuznitz
>
>>> Shouldn't Asterisk be listening on UDP port 5060?
>
> Yes. Unless configured otherwise, that's the SIP port. It's set in
> sip.conf.
>
> What does 'sip show settings' show? The first 2 settings (1.6.2.5) should
> be:
>
>   UDP SIP Port:           5060
>   UDP Bindaddress:        0.0.0.0
>
> unless you know what you're doing.
>
> --
> Thanks in advance,
> -
> Steve Edwards       sedwa...@sedwards.com      Voice: +1-760-468-3867 PST
> Newline                                              Fax: +1-760-731-3000
>
> --
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>

Another question to add: Is SIP working, is chan_sip loaded? If your
SIP endpoints are not working, try running something simple like "sip
show peers"...if you get a message about no such command existing, SIP
is not loading ;-)


Cheers,
Sherwood McGowan

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Steve Edwards
>> On Behalf Of Gary Kuznitz

>> Shouldn't Asterisk be listening on UDP port 5060?

Yes. Unless configured otherwise, that's the SIP port. It's set in 
sip.conf.

What does 'sip show settings' show? The first 2 settings (1.6.2.5) should 
be:

   UDP SIP Port:   5060
   UDP Bindaddress:0.0.0.0

unless you know what you're doing.

-- 
Thanks in advance,
-
Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
Newline  Fax: +1-760-731-3000

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Danny Nicholas
-Original Message-
From: asterisk-users-boun...@lists.digium.com
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Gary Kuznitz 
Sent: Thursday, December 02, 2010 3:22 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Asterisk ports



On 2 Dec 2010 at 15:11, Danny (Danny Nicholas ) commented

about RE: [asterisk-users] Asterisk ports:

> -Original Message-
> From: asterisk-users-boun...@lists.digium.com
> [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Gary Kuznitz

> Sent: Thursday, December 02, 2010 3:06 PM
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: [asterisk-users] Asterisk ports
> 
> Shouldn't Asterisk be listening on UDP port 5060?
> 
> I'm working with an Asterisk installation running in Ubuntu.  Asterisk is
> running but 
> non of the phone are connecting. I ran netstat -a and I didn't see 5060.
Am
> I 
> supposed to see something listening?
> 
> Thank you,
> 
> Gary
> 
> Try netstat -anp|grep ast
> 
> This will show you all of the ports and addresses asterisk is using (if it
> is running).
 Thank you for the reply.

Does this look correct?  I don't know what port the sip phones are supposed
to be 
communicating on.

tcp0  0 0.0.0.0:50380.0.0.0:*   LISTEN
5382/asterisk   
tcp0  0 0.0.0.0:20000.0.0.0:*   LISTEN
5382/asterisk   
tcp0  0 0.0.0.0:80880.0.0.0:*   LISTEN
5382/asterisk   
udp0  0 0.0.0.0:27270.0.0.0:*
5382/asterisk   
udp0  0 0.0.0.0:45200.0.0.0:*
5382/asterisk   
udp0  0 0.0.0.0:45690.0.0.0:*
5382/asterisk   


Thank you,

Gary

What is the bindport value in sip.conf?  The values listed above are
8080 - http
2000 - skinny
5038 - manager
4520 - dundi
4569 - iax

I don't have a 2727 on my Asterisk.  This might be your sip port.


-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Gary Kuznitz
Thank you for the reply.

On 2 Dec 2010 at 16:23, Jeff (Jeff LaCoursiere ) commented 
about Re: [asterisk-users] Asterisk ports:

> 
> On Thu, 2 Dec 2010, Gary Kuznitz wrote:
> 
> > Shouldn't Asterisk be listening on UDP port 5060?
> >
> > I'm working with an Asterisk installation running in Ubuntu.  Asterisk is 
> > running but
> > non of the phone are connecting. I ran netstat -a and I didn't see 5060.  
> > Am I
> > supposed to see something listening?
> >
> > Thank you,
> >
> > Gary
> >
> 
> You probably see it as:
> 
> udp0  0 *:sip   *:*
I don't see this.  That could certainly be why the phones are connecting.  Why 
wouldn't that port be listening?

Thank you,

Gary

> 
> j



-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Gary Kuznitz


On 2 Dec 2010 at 15:11, Danny (Danny Nicholas ) commented 
about RE: [asterisk-users] Asterisk ports:

> -Original Message-
> From: asterisk-users-boun...@lists.digium.com
> [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Gary Kuznitz 
> Sent: Thursday, December 02, 2010 3:06 PM
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: [asterisk-users] Asterisk ports
> 
> Shouldn't Asterisk be listening on UDP port 5060?
> 
> I'm working with an Asterisk installation running in Ubuntu.  Asterisk is
> running but 
> non of the phone are connecting. I ran netstat -a and I didn't see 5060.  Am
> I 
> supposed to see something listening?
> 
> Thank you,
> 
> Gary
> 
> Try netstat -anp|grep ast
> 
> This will show you all of the ports and addresses asterisk is using (if it
> is running).
 Thank you for the reply.

Does this look correct?  I don't know what port the sip phones are supposed to 
be 
communicating on.

tcp0  0 0.0.0.0:50380.0.0.0:*   LISTEN 
5382/asterisk   
tcp0  0 0.0.0.0:20000.0.0.0:*   LISTEN 
5382/asterisk   
tcp0  0 0.0.0.0:80880.0.0.0:*   LISTEN 
5382/asterisk   
udp0  0 0.0.0.0:27270.0.0.0:*  
5382/asterisk   
udp0  0 0.0.0.0:45200.0.0.0:*  
5382/asterisk   
udp0  0 0.0.0.0:45690.0.0.0:*  
5382/asterisk   
unix  2  [ ACC ] STREAM LISTENING 180595382/asterisk   
/var/run/asterisk.ctl
unix  2  [ ACC ] STREAM LISTENING 205225768/fast-user-swit 
/tmp/orbit-docfxit/linc-1688-0-54225d8adde37
unix  2  [ ] DGRAM325885382/asterisk   
unix  3  [ ] STREAM CONNECTED 207295768/fast-user-swit 
unix  3  [ ] STREAM CONNECTED 207285768/fast-user-swit 
unix  3  [ ] STREAM CONNECTED 207275768/fast-user-swit 
/tmp/orbit-docfxit/linc-1688-0-54225d8adde37
unix  3  [ ] STREAM CONNECTED 205395768/fast-user-swit 
/tmp/orbit-docfxit/linc-1688-0-54225d8adde37
unix  3  [ ] STREAM CONNECTED 205265768/fast-user-swit 
unix  3  [ ] STREAM CONNECTED 205255768/fast-user-swit 
/tmp/orbit-docfxit/linc-1688-0-54225d8adde37
unix  3  [ ] STREAM CONNECTED 205205768/fast-user-swit 
unix  3  [ ] STREAM CONNECTED 205085768/fast-user-swit 

Thank you,

Gary



-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Jeff LaCoursiere

On Thu, 2 Dec 2010, Gary Kuznitz wrote:

> Shouldn't Asterisk be listening on UDP port 5060?
>
> I'm working with an Asterisk installation running in Ubuntu.  Asterisk is 
> running but
> non of the phone are connecting. I ran netstat -a and I didn't see 5060.  Am I
> supposed to see something listening?
>
> Thank you,
>
> Gary
>

You probably see it as:

udp0  0 *:sip   *:*

j

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports

2010-12-02 Thread Danny Nicholas
-Original Message-
From: asterisk-users-boun...@lists.digium.com
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Gary Kuznitz 
Sent: Thursday, December 02, 2010 3:06 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: [asterisk-users] Asterisk ports

Shouldn't Asterisk be listening on UDP port 5060?

I'm working with an Asterisk installation running in Ubuntu.  Asterisk is
running but 
non of the phone are connecting. I ran netstat -a and I didn't see 5060.  Am
I 
supposed to see something listening?

Thank you,

Gary

Try netstat -anp|grep ast

This will show you all of the ports and addresses asterisk is using (if it
is running).


-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


[asterisk-users] Asterisk ports

2010-12-02 Thread Gary Kuznitz
Shouldn't Asterisk be listening on UDP port 5060?

I'm working with an Asterisk installation running in Ubuntu.  Asterisk is 
running but 
non of the phone are connecting. I ran netstat -a and I didn't see 5060.  Am I 
supposed to see something listening?

Thank you,

Gary

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
   http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports and CentOS firewall

2008-01-13 Thread MatsK
Check this out:
http://www.voip-info.org/wiki-Asterisk+firewall+rules

dave cantera wrote:
> ed,
> this may be somewhat liberal but should do the trick...
> daveC
> -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 69 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 69 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 5060 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 5061 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 5062 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 4569 -j ACCEPT
> -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 5038 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 5036 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 1:2 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 5004 -j ACCEPT
> #
> -A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
> -A RH-Firewall-1-INPUT -p ipv6-crypt -j REJECT
> -A RH-Firewall-1-INPUT -p ipv6-auth -j REJECT
> -A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT
> -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
> -A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
> -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
> -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
 >
 >
> Ed Nunez wrote:
>>
>> If I enable the firewall on my Server, which ports should I open for 
>> Asterisk to work properly.  Is it enough to just open the SIP ports?
>>


___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] Asterisk ports and CentOS firewall

2008-01-12 Thread dave cantera




ed,
this may be somewhat liberal but should do the trick...
daveC
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 69 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 69 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 5060 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 5061 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 5062 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 4569 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 5038 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 5036 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 1:2 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 5004 -j ACCEPT
#
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p ipv6-crypt -j REJECT
-A RH-Firewall-1-INPUT -p ipv6-auth -j REJECT
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j
ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j
ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j
ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited



Ed Nunez wrote:

  
  
  

  
  If
I enable the firewall on my Server, which ports should I open
for Asterisk to work properly.  Is it enough to just open the SIP ports?
  
  

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users
  

Internal Virus Database is out-of-date.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.17.13/1209 - Release Date: 01/04/2008 12:05 PM
  


-- 
My wife's sister is in California.  
I should buy her a Videophone2008!

Truly, The Next Best Thing to Being There!
--

WorldWideVideoPhones.com
856.380.0894






___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

[asterisk-users] Asterisk ports and CentOS firewall

2008-01-12 Thread Ed Nunez
If I enable the firewall on my Server, which ports should I open for
Asterisk to work properly.  Is it enough to just open the SIP ports?

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users