VoIP Firewall: Difference between revisions
Appearance
Content deleted Content added
Mention that RTP uses 2 ports, and that you can halve the number of firewall rules needed |
Add an example for a consumer router (e.g. ZyXEL). Needs 6 rules - or 12 if your RTP port range doesn't include 5060 |
||
| Line 63: | Line 63: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
=Example consumer router config= |
|||
The following example is for an AAISP-supplied ZyXEL router. Because the Custom Destination Port range covers port 5060 we get away with half the rules! |
|||
{| class="wikitable" |
|||
!colspan="7"|Firewall Rules on the AAISP VoIP Platform |
|||
|- |
|||
!Filter name |
|||
!Source IP Address |
|||
!IP Type |
|||
!Protocol |
|||
!Custom Destination Port |
|||
!Policy |
|||
!Direction |
|||
|- |
|||
|VoIP6A |
|||
|2001:8b0:0:30::5060:0/112 |
|||
|IPv6 |
|||
|UDP |
|||
|5000-5999 |
|||
|ACCEPT |
|||
|WAN to LAN |
|||
|- |
|||
|VoIP6B |
|||
|2001:8b0:5060::/48 |
|||
|IPv6 |
|||
|UDP |
|||
|5000-5999 |
|||
|ACCEPT |
|||
|WAN to LAN |
|||
|- |
|||
|VoIP4A |
|||
|81.187.30.110/31 |
|||
|IPv4 |
|||
|UDP |
|||
|5000-5999 |
|||
|ACCEPT |
|||
|WAN to LAN |
|||
|- |
|||
|VoIP4B |
|||
|81.187.30.112/29 |
|||
|IPv4 |
|||
|UDP |
|||
|5000-5999 |
|||
|ACCEPT |
|||
|WAN to LAN |
|||
|- |
|||
|VoIP4C |
|||
|90.155.3.0/24 |
|||
|IPv4 |
|||
|UDP |
|||
|5000-5999 |
|||
|ACCEPT |
|||
|WAN to LAN |
|||
|- |
|||
|VoIP4D |
|||
|90.155.103.0/24 |
|||
|IPv4 |
|||
|UDP |
|||
|5000-5999 |
|||
|ACCEPT |
|||
|WAN to LAN |
|||
|- |
|||
|} |
|||
=Other things to Firewall= |
=Other things to Firewall= |
||