Keep in mind that’s only on firewalls that are sip aware, many are not


On 7/31/13 2:09 AM, "Steven Ayre" <steveayre@gmail.com> wrote:

On a stateful firewall you can also choose to only open the SIP ports. That'll depend on your SIP profile settings. 5060 at least, and perhaps 5080 too.

The firewall could look at the SDP, mark the RTP ports as related traffic and automatically open them for you too.

That can -only- work with normal SIP though - for obvious reasons if you're using TLS it won't be able to see the ports being used.

-Steve




On 25 July 2013 17:56, Lloyd Aloysius <lloyd.aloysius@sunteltech.ca> wrote:

SIP TCP/UDP  5060 - 5090  
RTP UDP      16384 - 32768

Lloyd
  <http://www.sunteltech.ca/blog/>


On Wed, Jul 24, 2013 at 8:38 PM, Jim Lynch <jim@k4gvo.com> wrote:

I'm running a simple switch.  No phones are connected to the system from
outside of my local network.  The only wan connections I have are a
couple of voip providers.  None of my phones on the lan call outside of
the lan.  All they talk to is the switch.

I see a bunch of ports listed at
http://wiki.freeswitch.org/wiki/Firewall but don't know if I need them
all.  I suspect I don't.  I want to close up the firewall as much as I can.

Thanks,
Jim.