Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

VoIP Firewall: Difference between revisions

m
Use the proper IP range for current AAISP VoIP servers
m (The description says port range of 5000-5098, so make the rules match (i.e. not 5000-5999))
m (Use the proper IP range for current AAISP VoIP servers)
As an example with 2 phones, the first phone uses inbound SIP port 5060 and incoming RTP ports 5062-5068, and the second phone uses inbound SIP port 5040 and incoming RTP ports 5042-5048. Using iptables, the required rules would be like:
 
/sbin/iptables -t nat -A PREROUTING -i eth0 -m udp -p udp -s 81.187.30.0112/2429 --dport 5060:5069 -j DNAT --to-destination 192.168.1.12
/sbin/iptables -t nat -A PREROUTING -i eth0 -m udp -p udp -s 81.187.30.0112/2429 --dport 5040:5049 -j DNAT --to-destination 192.168.1.13
 
See: [[VoIP NAT]]
editor
466

edits