This doesn't ring a bell, but is this truly an internal firewall protecting network segments, or is this the internal interface of your internet firewall?
Mike From: arda savran [mailto:ardasav...@yahoo.com] Sent: Monday, November 30, 2009 5:53 PM To: Tony Graziano; sipx-users@list.sipfoundry.org; Picher, Michael Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling We have set everything for UDP port range 30000-31000 and 5060 but our internal firewall keeps catching a bunch of extra ports from SIPX They start from UDP 8XXX and the number goes all the way up to UDP 13000. We were thinking maybe these are the media services ports we missed. We enabled NAT under "servers" and entered the IP address of the SIPX under the "NAT address" section to force the SIPX to use the 30000-31000 range but that did not work. Do the numbers 8XXX or 12XXX-13XXX ring a bell? Thanks --- On Thu, 11/26/09, Picher, Michael <mpic...@cmctechgroup.com> wrote: From: Picher, Michael <mpic...@cmctechgroup.com> Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling To: "Tony Graziano" <tgrazi...@myitdepartment.net>, ardasav...@yahoo.com, sipx-users@list.sipfoundry.org Date: Thursday, November 26, 2009, 12:18 PM Tony has it right here... For firewall inbound / outbound traffic. Pay special attention to the symmetric NAT. If you are trying to filter within your VLan segments however this is a bit different. Thanks, Mike -----Original Message----- From: Tony Graziano [mailto:tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.n et> ] Sent: Wednesday, November 25, 2009 5:13 PM To: ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> ; sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> ; Picher, Michael Subject: Re: [sipx-users] SIPX --- UDP port range for media services andsignaling You can adjust the port range for the media relay. In 4.0.x it is 30000-31000 UDP. Sip is 5060 (tcp and udp). Itsp signalling (default) is 5080 udp. http://blog.myitdepartment.net/?p=52 The firewall needs to support symettric nat. ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.n et> LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ ----- Original Message ----- From: arda savran <ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> > To: Tony Graziano <tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.n et> >; sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> <sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> >; MichaelPicher <mpic...@cmctechgroup.com <http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > Sent: Wed Nov 25 16:49:15 2009 Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling Thanks, We are trying to build some filtering rules for the network. We have a firewall inside the network and we need to know all possible signaling and other UDP ports that SIPX may use for RTP (media services) or any type of signaling. We opened UDP/TCP 5060 and UDP30000-31000 but I don't think those we were enough because we see some UDP 8xxx and some other UDP ports within 11000-13000 range. Can somebody please let me know where I can find the exact range for the SIPX operations. Mike, what files do you think we can adjust securely in SIPX to lock the UDP port range down to 30000-31000? Thanks --- On Wed, 11/25/09, Picher, Michael <mpic...@cmctechgroup.com <http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > wrote: From: Picher, Michael <mpic...@cmctechgroup.com <http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling To: "Tony Graziano" <tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.n et> >, ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> , sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> Date: Wednesday, November 25, 2009, 11:13 AM As an fyi, I did notice in sipXbridge on 4.1.x (development / unstable version) that the RTP traffic ports were 20000 - 31000 udp by default. Mike -----Original Message----- From: sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.si pfoundry.org> [mailto:sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.si pfoundry.org> ] On Behalf Of Tony Graziano Sent: Tuesday, November 24, 2009 10:35 PM To: ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> ; sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> Subject: Re: [sipx-users] SIPX --- UDP port range for media services andsignaling If you are using sipxbridge, go to the wiki page for this. http://sipx-wiki.calivia.com/index.php/SipXbridge_Overview_and_Configura tion ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.n et> LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ ----- Original Message ----- From: sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.si pfoundry.org> <sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.si pfoundry.org> > To: sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> <sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> > Sent: Tue Nov 24 22:28:19 2009 Subject: [sipx-users] SIPX --- UDP port range for media services andsignalingGood Day, Does anybody have a list of ports that SIPx uses to operate? We are trying to open some ports on out firewall and already started to have some issues with the communication. What I need is a list of all the possible UDP ports that SIPX can use for SIP signaling and other UDP ports to pull media services. I have been trying to find the port range for the RTP traffic for voicemail, autoattendant and conferencing services as well. I have been looking around and could not find any resources that I can trust, Thanks in advance, _______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry .org> List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
_______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
