[Serusers] Voip and Firewalls

[Klaus Darilion]

That depends on the software you will use. Usually ser listens and sends 
on port 5060. Many SIP clients use dynamic ports for SIP and for RTP.

Thus, for a SIP proxy allow:
   incoming: *:* -> ser.ip.address:5060
   outgoing: ser.ip.address:5060 -> *:*

If oyu use mediaproxy/rtpproxy, you have allow traffic from/to the ports 
used by the rtpproxy.

Also make sure to allow DNS, and radius/mysql/postgres if needed.

klaus

harry gaillac wrote:
> Hello,
> 
> What are the policies to apply in order to secure a
> network with Voip context?
> 
> Which ports must be openned for signalling and which
> ports must be openned for rtp traffic
> incoming/outgoing ?
> 
> Regards
> Harry
> 
> 
> 	
> 
> 	
> 		
> ___________________________________________________________________________ 
> Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger 
> Téléchargez cette version sur http://fr.messenger.yahoo.com
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 
>