It would help if you could acknowledge your firewall is handling NAT properly. sipXecs requires symmetric port NAT. What firewall are you using?
I've posted a how-to with pfsense here: http://blog.myitdepartment.net/?p=37 On Mon, Nov 30, 2009 at 5:52 PM, arda savran <ardasav...@yahoo.com> wrote: > We have set everything for UDP port range 30000-31000 and 5060 but our > internal firewall keeps catching a bunch of extra ports from SIPX > > They start from UDP 8XXX and the number goes all the way up to UDP 13000. > We were thinking maybe these are the media services ports we missed. > > We enabled NAT under "servers" and entered the IP address of the SIPX under > the "NAT address" section to force the SIPX to use the 30000-31000 range but > that did not work. > > Do the numbers 8XXX or 12XXX-13XXX ring a bell? > > Thanks > > > --- On *Thu, 11/26/09, Picher, Michael <mpic...@cmctechgroup.com>* wrote: > > > From: Picher, Michael <mpic...@cmctechgroup.com> > Subject: RE: [sipx-users] SIPX --- UDP port range for media services > andsignaling > To: "Tony Graziano" <tgrazi...@myitdepartment.net>, ardasav...@yahoo.com, > sipx-users@list.sipfoundry.org > Date: Thursday, November 26, 2009, 12:18 PM > > > Tony has it right here... For firewall inbound / outbound traffic. Pay > special attention to the symmetric NAT. > > If you are trying to filter within your VLan segments however this is a > bit different. > > Thanks, > Mike > > -----Original Message----- > From: Tony Graziano > [mailto:tgrazi...@myitdepartment.net<http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net>] > > Sent: Wednesday, November 25, 2009 5:13 PM > To: > ardasav...@yahoo.com<http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com>; > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org>; > Picher, > Michael > Subject: Re: [sipx-users] SIPX --- UDP port range for media services > andsignaling > > You can adjust the port range for the media relay. > > In 4.0.x it is 30000-31000 UDP. > Sip is 5060 (tcp and udp). Itsp signalling (default) is 5080 udp. > > http://blog.myitdepartment.net/?p=52 > > The firewall needs to support symettric nat. > ============================ > Tony Graziano, Manager > Telephone: 434.984.8430 > Fax: 434.984.8431 > > Email: > tgrazi...@myitdepartment.net<http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> > > LAN/Telephony/Security and Control Systems Helpdesk: > Telephone: 434.984.8426 > Fax: 434.984.8427 > > Helpdesk Contract Customers: > http://www.myitdepartment.net/gethelp/ > > ----- Original Message ----- > From: arda savran > <ardasav...@yahoo.com<http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> > > > To: Tony Graziano > <tgrazi...@myitdepartment.net<http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> > >; > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org>< > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> > >; > MichaelPicher > <mpic...@cmctechgroup.com<http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > > > Sent: Wed Nov 25 16:49:15 2009 > Subject: RE: [sipx-users] SIPX --- UDP port range for media services > andsignaling > > Thanks, > > We are trying to build some filtering rules for the network. We have a > firewall inside the network and we need to know all possible signaling > and > other UDP ports that SIPX may use for RTP (media services) or any type > of > signaling. > > We opened UDP/TCP 5060 and UDP30000-31000 but I don't think those we > were > enough because we see some UDP 8xxx and some other UDP ports within > 11000-13000 range. > > Can somebody please let me know where I can find the exact range for the > SIPX operations. > > Mike, what files do you think we can adjust securely in SIPX to lock the > UDP > port range down to 30000-31000? > > Thanks > > > > --- On Wed, 11/25/09, Picher, Michael > <mpic...@cmctechgroup.com<http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com>> > wrote: > > > From: Picher, Michael > <mpic...@cmctechgroup.com<http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > > > Subject: RE: [sipx-users] SIPX --- UDP port range for media services > andsignaling > To: "Tony Graziano" > <tgrazi...@myitdepartment.net<http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> > >, > ardasav...@yahoo.com<http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> > , > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> > Date: Wednesday, November 25, 2009, 11:13 AM > > > As an fyi, I did notice in sipXbridge on 4.1.x (development / unstable > version) that the RTP traffic ports were 20000 - 31000 udp by default. > > Mike > > -----Original Message----- > From: > sipx-users-boun...@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org> > [mailto:sipx-users-boun...@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org>] > On Behalf Of Tony > Graziano > Sent: Tuesday, November 24, 2009 10:35 PM > To: > ardasav...@yahoo.com<http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com>; > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> > Subject: Re: [sipx-users] SIPX --- UDP port range for media services > andsignaling > > If you are using sipxbridge, go to the wiki page for this. > > http://sipx-wiki.calivia.com/index.php/SipXbridge_Overview_and_Configura > tion > ============================ > Tony Graziano, Manager > Telephone: 434.984.8430 > Fax: 434.984.8431 > > Email: > tgrazi...@myitdepartment.net<http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> > > LAN/Telephony/Security and Control Systems Helpdesk: > Telephone: 434.984.8426 > Fax: 434.984.8427 > > Helpdesk Contract Customers: > http://www.myitdepartment.net/gethelp/ > > ----- Original Message ----- > From: > sipx-users-boun...@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org> > <sipx-users-boun...@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org> > > > To: > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org>< > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> > > > Sent: Tue Nov 24 22:28:19 2009 > Subject: [sipx-users] SIPX --- UDP port range for media services > andsignalingGood Day, > > Does anybody have a list of ports that SIPx uses to operate? > > We are trying to open some ports on out firewall and already started to > have > some issues with the communication. > > What I need is a list of all the possible UDP ports that SIPX can use > for > SIP signaling and other UDP ports to pull media services. I have been > trying > to find the port range for the RTP traffic for voicemail, autoattendant > and > conferencing services as well. > > I have been looking around and could not find any resources that I can > trust, > > Thanks in advance, > _______________________________________________ > sipx-users mailing list > sipx-users@list.sipfoundry.org<http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> > List Archive: http://list.sipfoundry.org/archive/sipx-users > Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users > sipXecs IP PBX -- http://www.sipfoundry.org/ > >
_______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/