Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-02-02 Thread Tzafrir Cohen
On Tue, Jan 31, 2012 at 12:54:41PM +, Arthur Stanfield wrote: Hi Gilles, You can't tunnel UDP through SSH. For the record: you can. But it's not really a good idea. Two options: 1. ssh -D: dynamic port forwarding. Which basically means that it creates a socks4/socks5 proxy. You can now

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-02-02 Thread Jeff LaCoursiere
On Thu, 2 Feb 2012, Tzafrir Cohen wrote: Oh, and for the record, you can tunnel practically on top of anything. Just in case you're not familiar with it: IP over DNS (which means you don't even need direct access, and can use proxied DNS queries). http://code.kryo.se/iodine/ I figure you

[asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Gilles
Hello In case a NAT firewall prevents using STUN to open SIP/RTP ports, a solution is to first connect the phone to the Asterisk server through a tunnel, and then have data go through the tunnel. Are there hardphones that support OpenVPN? If none, what about SSH? Is this a good

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Doug Lytle
Gilles wrote: Are there hardphones that support OpenVPN? I've seen people mention snom with OpenVPN: http://wiki.snom.com/Networking/Virtual_Private_Network_%28VPN%29 Doug -- Ben Franklin quote: Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Arthur Stanfield
...@free.fr To: asterisk-users@lists.digium.com Sent: Tuesday, 31 January, 2012 12:32:20 PM Subject: [asterisk-users] [NAT] SSH vs. OpenVPN? Hello In case a NAT firewall prevents using STUN to open SIP/RTP ports, a solution is to first connect the phone to the Asterisk server through a tunnel

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread bakko
hello, yeallink T26 and T28 support OpenVPN too Regards -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs:

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Gilles
On Tue, 31 Jan 2012 12:54:41 + (GMT), Arthur Stanfield a...@dmcip.com wrote: You can't tunnel UDP through SSH. Some of the newer Grandstream handsets support OpenVPN and are a bit cheaper than the Snom alternatives. Thanks for the infos. So the only way to use SIP through locked-down NAT

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Gilles
On Tue, 31 Jan 2012 07:57:22 -0500, bakko asannu...@gmail.com wrote: yeallink T26 and T28 support OpenVPN too Thanks for the infos. If someone tried the Snom, Grandstream, or Yeallink, how good is their OpenVPN connection? --

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Jeff LaCoursiere
On Tue, 2012-01-31 at 14:13 +0100, Gilles wrote: On Tue, 31 Jan 2012 07:57:22 -0500, bakko asannu...@gmail.com wrote: yeallink T26 and T28 support OpenVPN too Thanks for the infos. If someone tried the Snom, Grandstream, or Yeallink, how good is their OpenVPN connection? Using

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Gilles
On Tue, 31 Jan 2012 10:03:46 -0600, Jeff LaCoursiere j...@sunfone.com wrote: Using Yealink T-28 with OpenVPN works fine - about three weeks now with no issues. Bummed that it seems to only support one tunnel, though. I asked their support team if they could make whatever changes necessary to

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Doug Lytle
Jeff LaCoursiere wrote: Bummed that it seems to only support one tunnel, though As in you can't register the phone to more then 1 remote Asterisk server via 2 different VPN tunnels or you can't have more then 1 call per VPN link? Doug -- Ben Franklin quote: Those who would give up

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Jeff LaCoursiere
On Tue, 2012-01-31 at 11:29 -0500, Doug Lytle wrote: Jeff LaCoursiere wrote: Bummed that it seems to only support one tunnel, though As in you can't register the phone to more then 1 remote Asterisk server via 2 different VPN tunnels or you can't have more then 1 call per VPN link?

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Jeff LaCoursiere
On Tue, 2012-01-31 at 17:23 +0100, Gilles wrote: On Tue, 31 Jan 2012 10:03:46 -0600, Jeff LaCoursiere j...@sunfone.com wrote: Using Yealink T-28 with OpenVPN works fine - about three weeks now with no issues. Bummed that it seems to only support one tunnel, though. I asked their support

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Gilles
On Tue, 31 Jan 2012 10:44:12 -0600, Jeff LaCoursiere j...@sunfone.com wrote: No - the phone allows you to register with multiple servers, and I would like to reach each server over its own tunnel. It won't do that today. Thanks for the info. --

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Dale Noll
On 01/31/2012 06:57 AM, Gilles wrote: Thanks for the infos. So the only way to use SIP through locked-down NAT routers is to use OpenVPN, either with the few hardphones that support it or with a softphone on a computer. You can also setup OpenVPN to connect a remote subnet (remote office)

Re: [asterisk-users] [NAT] SSH vs. OpenVPN?

2012-01-31 Thread Gilles
On Tue, 31 Jan 2012 16:25:37 -0600, Dale Noll dn...@wi.rr.com wrote: You can also setup OpenVPN to connect a remote subnet (remote office) and it will route all traffic between subnets. Configure the hard/soft phones on the remote subnet to route through the OpenVPN. This works pretty well for