<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Interesting stuff. What about those of us who run fs on boxes "in the cloud" - we run fail2ban, but perhaps we should also be considering something more sophisticated. Are there any good software stateful firewalls that might suit?<div><br><div><div>On 13 Jun 2012, at 22:07, Mario G wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">A little late but important to say: When I had the Linksys routers my FS had constant attempts from around the world, mostly China to break into it. I used WireShark to see the attempts, the Linksys could not keep the out.. Since the Zyxel USG100 it has stopped. It has an outstanding firewall and the object oriented rules really helps with SIP. Whatever you select, keep security in mind.<div> <br><div><div>On Jun 12, 2012, at 12:23 PM, Lloyd Aloysius wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><font face="verdana,sans-serif">I try with the pfsense 2.0. Specially BLF causing lots of problems.</font><div><font face="verdana, sans-serif"><br></font></div><div><font face="verdana, sans-serif">====</font></div><div><font face="verdana, sans-serif"><br>
</font></div><div><font face="verdana, sans-serif">In the past .. I try the following</font></div><div><font face="verdana, sans-serif"><br></font></div><div><font face="verdana, sans-serif">1. Linksys WRT54GL + Tomato ... Good for a small office < 5 Extension</font></div>
<div><font face="verdana, sans-serif">2. Monowall with PC Engine Alix</font></div><div><font face="verdana, sans-serif"><br></font><div><br clear="all">Does any one test with a Cisco ASA 5505? <br><br>
<br><br><div class="gmail_quote">On Tue, Jun 12, 2012 at 1:03 PM, Patrick Lists <span dir="ltr"><<a href="mailto:freeswitch-list@puzzled.xs4all.nl" target="_blank">freeswitch-list@puzzled.xs4all.nl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 12-06-12 18:20, Mario G wrote:<br>
> I looked for a year to find something with no NAT problems, dual WAN,<br>
> and auto fallback with load/balancing without causing FS any hiccups. I<br>
> highly recommend Zyxel, I use a USG100 with SPI ALG turned ON (I read<br>
> some people hate it) but it has been bullet proof. And the best part is<br>
> there is practically nothing to tell FS about! And when one WAN (DSL)<br>
> goes down the SIP traffic goes out the other one, even switches back<br>
> automatically! Pair this up with FS and you'll never look back. Hope<br>
> this helps.<br>
<br>
</div>Thanks for the info. Have you tried any Draytek Vigor routers like the<br>
2920? I have no experience with them but was told they work fine in dual<br>
WAN setups.<br>
<br>
Regards,<br>
Patrick<br>
<div class="HOEnZb"><div class="h5"><br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com/" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org/" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br>
<br>
Join Us At ClueCon - Aug 7-9, 2012<br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br></div></div>
_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<br><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><br><br>FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>http://www.cudatel.com<br><br>Official FreeSWITCH Sites<br>http://www.freeswitch.org<br>http://wiki.freeswitch.org<br>http://www.cluecon.com<br><br>Join Us At ClueCon - Aug 7-9, 2012<br><br>FreeSWITCH-users mailing list<br>FreeSWITCH-users@lists.freeswitch.org<br>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br>http://www.freeswitch.org<br></blockquote></div><br></div></div>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<br><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>http://www.freeswitchsolutions.com<br><br>FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>http://www.cudatel.com<br><br>Official FreeSWITCH Sites<br>http://www.freeswitch.org<br>http://wiki.freeswitch.org<br>http://www.cluecon.com<br><br>Join Us At ClueCon - Aug 7-9, 2012<br><br>FreeSWITCH-users mailing list<br>FreeSWITCH-users@lists.freeswitch.org<br>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br>http://www.freeswitch.org<br></blockquote></div><br></div></body></html>