I struggled with a customer in southern california who called and needed
help with sipx. His problem stemmed from a few basic config options that
were minorly wrong. He had a cable modem and was not really utilizing it,
but his ITSP sold him an edgemarc box.

The darn thing is more cumbersome than iptables is manually. It will not
work in front of sipx except for trunking. The trunking piece is difficult
to setup. He worked with the provider for two days and called me. Two hours
later he called me back and said I have that PC with two network cards for
that firewall, now what?

I sent him the ISO download for pfsense... 2.5 hours later we had the
firewall replace, the edgemarc boxed up, the ITSP configured and working. 10
minutes later we had a VPN and bandwidth shaping setup.

I don't use pfsense exclusively. I do use it more and more. Just last week
(Saturday) I did a maintenance window for a customer to swap out a 2 port
ethernet card on their recently (previously endian firewall) reloaded
firewall and replaced it with a 4 port card. Since it was the same
card/driver, I did a backup, shutdown, swapped the card and rebooted. i
plugged the cables back into the same ports as before and the whole exercise
took 20 minutes. In their case they have 3 isp links, one LAN and one
captive portal network. They also have a PPTP VPN and OpenVPN for users, as
well as an IPSEC VPN for site to site (we connect two sipx systems via this,
so their internal calls between locations are encrypted). We even route
their sipx system to send its outbound emails over the commodity DLS instead
of chewing up the fiber link by using a lan rule (no routing). Its so darned
impressive how stable the thing is (running 2.0 Beta) that I tlk too much
about it.

On Wed, Sep 15, 2010 at 9:07 PM, Michael Picher <[email protected]> wrote:

> Go for it!  :-)
>
>
> On Wed, Sep 15, 2010 at 5:53 PM, Michael Scheidell <
> [email protected]> wrote:
>
>>  On 9/15/10 8:51 PM, Michael Picher wrote:
>>
>> Agreed...  just fought with this at another place too...  can the thing.
>>
>>  wouldn't an integrated pfsense/sipx package be a fantastic option?
>> pfsense already has a freeswitch package.
>>
>> --
>> Michael Scheidell, CTO
>> o: 561-999-5000
>> d: 561-948-2259
>> ISN: 1259*1300
>> > *| *SECNAP Network Security Corporation
>>
>>    - Certified SNORT Integrator
>>    - 2008-9 Hot Company Award Winner, World Executive Alliance
>>    - Five-Star Partner Program 2009, VARBusiness
>>    - Best in Email Security,2010: Network Products Guide
>>    - King of Spam Filters, SC Magazine 2008
>>
>>
>> ------------------------------
>>
>> This email has been scanned and certified safe by SpammerTrap®.
>> For Information please see http://www.secnap.com/products/spammertrap/
>> ------------------------------
>>
>>
>> _______________________________________________
>> sipx-users mailing list
>> [email protected]
>> List Archive: http://list.sipfoundry.org/archive/sipx-users/
>>
>
>
>
> --
> There are 10 kinds of people in this world, those who understand binary and
> those who don't.
>
> [email protected]
> blog: http://www.sipxecs.info
> call: sip:[email protected] <sip%[email protected]>
>
> _______________________________________________
> sipx-users mailing list
> [email protected]
> List Archive: http://list.sipfoundry.org/archive/sipx-users/
>



-- 
======================
Tony Graziano, Manager
Telephone: 434.984.8430
sip: [email protected]
Fax: 434.984.8431

Email: [email protected]

LAN/Telephony/Security and Control Systems Helpdesk:
Telephone: 434.984.8426
sip: [email protected]
Fax: 434.984.8427

Helpdesk Contract Customers:
http://www.myitdepartment.net/gethelp/

Why do mathematicians always confuse Halloween and Christmas?
Because 31 Oct = 25 Dec.
_______________________________________________
sipx-users mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-users/

Reply via email to