The only time that 30000-31000 and tcp/udp are assured are when you are utilizing sipXbridge to handle the calls.
If there is no NAT involved you are in a more typical routed network scenario. For this type of scenario you should probably consider the following ports at a minimum: 5060 – 5080 tcp & udp 12000 tcp - bria pro provisioning) 69 tcp – tftp provisioning 21 tcp – ftp provisioning 22 tcp – ssh 80 & 8443 tcp – browser access to pbx 53 udp – dns 123 udp – ntp For bug reports: create an account at http://track.sipfoundry.org <http://track.sipfoundry.org> And to repeat after Scott: Consider the following excellent advice when requesting help... http://www.chiark.greenend.org.uk/~sgtatham/bugs.html Carefully describe your configuration, and post trace data. You really have not given anyone here enough information to even begin to guess what your problem might be. Mike From: arda savran [mailto:ardasav...@yahoo.com] Sent: Wednesday, December 02, 2009 9:58 AM To: Tony Graziano; sipx-users@list.sipfoundry.org; Picher, Michael Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling I think you can say it is an internal firewall. We have 4 SIPX servers located in our datacenter which is managed by some other company. That is why we have a firewall between our SIPXecs cluster and internal network. We do not have any other firewalls in our internal network. We are using Patton media gateways in B2BUA mode at each site in our internal network. So we have a centrally managed system. We had UDP 30000-31000 and TCP/UDP 5060 ports opened on the firewall but we were told that SIPXecs is trying to use more UDP ports than we expected. We are also implementing our QoS policies based on destination port numbers and when SIPX goes out of the defined range it chews up a lot of our DATA bandwidth. Mike, I am also having another issue with my clustered system and I was wondering what the proper way is to open a bug report. I do not want to waste anybodys time. My problem is I am not able to see any voicemails in my inbox when I try to use the "user portal" to check the voicemail. Like I said, we have 4 SIPX servers here. First 2 are for HA Call routing; 3rd one is for dedicated conferencing, 4th one is voicemail. I can retrieve voicemail and listen to it when I call the voicemail extension for a specific extension but the "user portal" for the same extension shows nothing in the voicemail inbox. Is this a known bug? If Not how do I proceed with the bug report? Thanks, --- On Tue, 12/1/09, Picher, Michael <mpic...@cmctechgroup.com> wrote: From: Picher, Michael <mpic...@cmctechgroup.com> Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling To: "arda savran" <ardasav...@yahoo.com>, "Tony Graziano" <tgrazi...@myitdepartment.net>, sipx-users@list.sipfoundry.org Date: Tuesday, December 1, 2009, 11:58 AM This doesn’t ring a bell, but is this truly an internal firewall protecting network segments, or is this the internal interface of your internet firewall? Mike From: arda savran [mailto:ardasav...@yahoo.com] Sent: Monday, November 30, 2009 5:53 PM To: Tony Graziano; sipx-users@list.sipfoundry.org; Picher, Michael Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling We have set everything for UDP port range 30000-31000 and 5060 but our internal firewall keeps catching a bunch of extra ports from SIPX They start from UDP 8XXX and the number goes all the way up to UDP 13000. We were thinking maybe these are the media services ports we missed. We enabled NAT under "servers" and entered the IP address of the SIPX under the "NAT address" section to force the SIPX to use the 30000-31000 range but that did not work. Do the numbers 8XXX or 12XXX-13XXX ring a bell? Thanks --- On Thu, 11/26/09, Picher, Michael <mpic...@cmctechgroup.com> wrote: From: Picher, Michael <mpic...@cmctechgroup.com> Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling To: "Tony Graziano" <tgrazi...@myitdepartment.net>, ardasav...@yahoo.com, sipx-users@list.sipfoundry.org Date: Thursday, November 26, 2009, 12:18 PM Tony has it right here... For firewall inbound / outbound traffic. Pay special attention to the symmetric NAT. If you are trying to filter within your VLan segments however this is a bit different. Thanks, Mike -----Original Message----- From: Tony Graziano [mailto:tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> ] Sent: Wednesday, November 25, 2009 5:13 PM To: ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> ; sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> ; Picher, Michael Subject: Re: [sipx-users] SIPX --- UDP port range for media services andsignaling You can adjust the port range for the media relay. In 4.0.x it is 30000-31000 UDP. Sip is 5060 (tcp and udp). Itsp signalling (default) is 5080 udp. http://blog.myitdepartment.net/?p=52 <http://blog.myitdepartment.net/?p=52> The firewall needs to support symettric nat. ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ <http://www.myitdepartment.net/gethelp/> ----- Original Message ----- From: arda savran <ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> > To: Tony Graziano <tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> >; sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> <sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> >; MichaelPicher <mpic...@cmctechgroup.com <http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > Sent: Wed Nov 25 16:49:15 2009 Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling Thanks, We are trying to build some filtering rules for the network. We have a firewall inside the network and we need to know all possible signaling and other UDP ports that SIPX may use for RTP (media services) or any type of signaling. We opened UDP/TCP 5060 and UDP30000-31000 but I don't think those we were enough because we see some UDP 8xxx and some other UDP ports within 11000-13000 range. Can somebody please let me know where I can find the exact range for the SIPX operations. Mike, what files do you think we can adjust securely in SIPX to lock the UDP port range down to 30000-31000? Thanks --- On Wed, 11/25/09, Picher, Michael <mpic...@cmctechgroup.com <http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > wrote: From: Picher, Michael <mpic...@cmctechgroup.com <http://us.mc656.mail.yahoo.com/mc/compose?to=mpic...@cmctechgroup.com> > Subject: RE: [sipx-users] SIPX --- UDP port range for media services andsignaling To: "Tony Graziano" <tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> >, ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> , sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> Date: Wednesday, November 25, 2009, 11:13 AM As an fyi, I did notice in sipXbridge on 4.1.x (development / unstable version) that the RTP traffic ports were 20000 - 31000 udp by default. Mike -----Original Message----- From: sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org> [mailto:sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org> ] On Behalf Of Tony Graziano Sent: Tuesday, November 24, 2009 10:35 PM To: ardasav...@yahoo.com <http://us.mc656.mail.yahoo.com/mc/compose?to=ardasav...@yahoo.com> ; sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> Subject: Re: [sipx-users] SIPX --- UDP port range for media services andsignaling If you are using sipxbridge, go to the wiki page for this. http://sipx-wiki.calivia.com/index.php/SipXbridge_Overview_and_Configura <http://sipx-wiki.calivia.com/index.php/SipXbridge_Overview_and_Configura> tion ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: tgrazi...@myitdepartment.net <http://us.mc656.mail.yahoo.com/mc/compose?to=tgrazi...@myitdepartment.net> LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ <http://www.myitdepartment.net/gethelp/> ----- Original Message ----- From: sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org> <sipx-users-boun...@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-users-boun...@list.sipfoundry.org> > To: sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> <sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> > Sent: Tue Nov 24 22:28:19 2009 Subject: [sipx-users] SIPX --- UDP port range for media services andsignalingGood Day, Does anybody have a list of ports that SIPx uses to operate? We are trying to open some ports on out firewall and already started to have some issues with the communication. What I need is a list of all the possible UDP ports that SIPX can use for SIP signaling and other UDP ports to pull media services. I have been trying to find the port range for the RTP traffic for voicemail, autoattendant and conferencing services as well. I have been looking around and could not find any resources that I can trust, Thanks in advance, _______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org <http://us.mc656.mail.yahoo.com/mc/compose?to=sipx-us...@list.sipfoundry.org> List Archive: http://list.sipfoundry.org/archive/sipx-users <http://list.sipfoundry.org/archive/sipx-users> Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users <http://list.sipfoundry.org/mailman/listinfo/sipx-users> sipXecs IP PBX -- http://www.sipfoundry.org/ <http://www.sipfoundry.org/>
_______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/