Re: [Asterisk-Users] Asterisk in a DMZ

2004-08-10 Thread Steve Szmidt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday 10 August 2004 10:55 am, Bastian Schern wrote: > Hello *, > > I try to establish a Asterisk-Server for internal and external usage. > Perfect use case for a DMZ, or not? Yes, use OpenBSD and make the "server firewall" a bridge. Then you can

Re: [Asterisk-Users] Asterisk in a DMZ

2004-08-10 Thread Dominique Kull
Why not use a public address for * ? A firewall, if properly configured can protect your * server the same way as it would with NAT in a DMZ. Dominique Bastian Schern wrote: Hello *, I try to establish a Asterisk-Server for internal and external usage. Perfect use case for a DMZ, or not? My co

Re: [Asterisk-Users] Asterisk in a DMZ

2004-08-10 Thread Andres Tello Abrego
a) use a transparent bridge firewall b) Use redirect with multiport of the sip ports to the * box IP. c) And the most effective for your topology, don't use nat, use only the routing properties of linux... can u post ur firewall rules and routing table? Bastian Schern wrote: Hello *, I try to estab

Re: [Asterisk-Users] Asterisk in a DMZ

2004-08-10 Thread Joseph
On Tue, 2004-08-10 at 10:55, Bastian Schern wrote: > But now the IP-Phones could not communicate with Asterisk because the > Server (a Linux host) will NAT the internal IP-Addresses. > > Is there a good way to solve this Problem? Not the best solution, but you could tell the server not to nat wh

[Asterisk-Users] Asterisk in a DMZ

2004-08-10 Thread Bastian Schern
Hello *, I try to establish a Asterisk-Server for internal and external usage. Perfect use case for a DMZ, or not? My configuration: I N T E R N E T | | | E |