Firewall
From VoIP.ms Wiki
| [quality revision] | [quality revision] |
90210chris (Talk | contribs) |
|||
| (9 intermediate revisions not shown) | |||
| Line 1: | Line 1: | ||
| + | {| class="wikitable" | ||
| + | |+ | ||
| + | |- | ||
| + | ! Article en Français !! Artículo en Español | ||
| + | |- | ||
| + | | [https://wiki.voip.ms/article/Pare-feu Français] || | ||
| + | [https://wiki.voip.ms/article/Cortafuego Español] | ||
| + | |} | ||
| + | |||
| + | |||
== Setup == | == Setup == | ||
| - | + | When configuring your firewall to work with VoIP.ms, there are certain ports which may need to be enabled to avoid quality and/or stability issues. Generally these ports are configured by default; however for users requiring the specific port numbers and protocols please use the information below: | |
| - | When configuring your firewall to work with VoIP.ms, there are certain ports which need to be enabled to avoid quality and/or stability issues. Generally these ports are configured by default; however for users requiring the specific port numbers and protocols please use the information below: | + | |
== SIP Ports == | == SIP Ports == | ||
| - | + | Destination port = 5060 | |
*Port range = 5060 - 5080 | *Port range = 5060 - 5080 | ||
Protocol = UDP or UDP/TCP | Protocol = UDP or UDP/TCP | ||
Direction = Incoming and Outgoing | Direction = Incoming and Outgoing | ||
| + | *This is for users who may require a port range for their firewall or router | ||
| + | == SIP-TLS Ports == | ||
| + | |||
| + | Destination port = 5061 | ||
| + | Port range = 5061 - 5081* | ||
| + | Protocol = TCP | ||
| + | Direction = Incoming and Outgoing | ||
| + | |||
| + | * This is for users who may require a port range for their firewall or router | ||
== RTP Ports == | == RTP Ports == | ||
| Line 18: | Line 36: | ||
The RTP port may vary by device. If configuring a firewall you will want to configure a range which includes the default RTP port in your device. | The RTP port may vary by device. If configuring a firewall you will want to configure a range which includes the default RTP port in your device. | ||
| - | + | Source port range = 5004-5005 | |
| + | Destination port range = 10001-20000 UD | ||
Protocol = UDP or UDP/TCP | Protocol = UDP or UDP/TCP | ||
Direction = Incoming and Outgoing | Direction = Incoming and Outgoing | ||
| - | |||
| - | |||
| - | |||
| - | |||
| - | |||
== IP addresses == | == IP addresses == | ||
| - | If you have a secured/restricted network and need to know the IP addresses to allow for VoIP.ms, then please use the addresses found [[ | + | If you have a secured/restricted network and need to know the IP addresses to allow for VoIP.ms, then please use the addresses found [[Choosing Server#IPs|Here]] . |
| - | + | ||
| - | + | ||
== Router Settings == | == Router Settings == | ||
| - | If your router includes a SIP ALG and/or SPI Firewall setting please ensure that it is disabled. | + | If your router includes a SIP ALG and/or SPI Firewall setting please ensure that it is disabled. |
| - | + | ||
| - | + | ||
== SonicWall == | == SonicWall == | ||
| Line 43: | Line 53: | ||
When using a SonicWALL and a PBX behind that SonicWALL, some of the inbound SIP connections may get refused because the SonicWALL is quick to timeout the UDP sessions on the firewall. Please [[SonicWall|Click Here]] for further details. | When using a SonicWALL and a PBX behind that SonicWALL, some of the inbound SIP connections may get refused because the SonicWALL is quick to timeout the UDP sessions on the firewall. Please [[SonicWall|Click Here]] for further details. | ||
| + | == pfSense == | ||
| - | + | Generally, pfSense should gracefully handle ATAs or handsets without special configuration of the firewall rules. If you encounter issues, refer to the pfSense [https://doc.pfsense.org/index.php/VoIP_Configuration VoIP configuration] or [https://doc.pfsense.org/index.php/PBX_VoIP_NAT_How-to PBX configuration]. | |
| - | + | ||
If you still have questions on this topic please contact us for further assistance. | If you still have questions on this topic please contact us for further assistance. | ||
Latest revision as of 17:38, 6 November 2020
| Article en Français | Artículo en Español |
|---|---|
| Français |
Contents |
Setup
When configuring your firewall to work with VoIP.ms, there are certain ports which may need to be enabled to avoid quality and/or stability issues. Generally these ports are configured by default; however for users requiring the specific port numbers and protocols please use the information below:
SIP Ports
Destination port = 5060 *Port range = 5060 - 5080 Protocol = UDP or UDP/TCP Direction = Incoming and Outgoing
- This is for users who may require a port range for their firewall or router
SIP-TLS Ports
Destination port = 5061 Port range = 5061 - 5081* Protocol = TCP Direction = Incoming and Outgoing
- This is for users who may require a port range for their firewall or router
RTP Ports
The RTP port may vary by device. If configuring a firewall you will want to configure a range which includes the default RTP port in your device.
Source port range = 5004-5005 Destination port range = 10001-20000 UD Protocol = UDP or UDP/TCP Direction = Incoming and Outgoing
IP addresses
If you have a secured/restricted network and need to know the IP addresses to allow for VoIP.ms, then please use the addresses found Here .
Router Settings
If your router includes a SIP ALG and/or SPI Firewall setting please ensure that it is disabled.
SonicWall
When using a SonicWALL and a PBX behind that SonicWALL, some of the inbound SIP connections may get refused because the SonicWALL is quick to timeout the UDP sessions on the firewall. Please Click Here for further details.
pfSense
Generally, pfSense should gracefully handle ATAs or handsets without special configuration of the firewall rules. If you encounter issues, refer to the pfSense VoIP configuration or PBX configuration.
If you still have questions on this topic please contact us for further assistance.
