How to register sip phone in VOIP Disabled Areas
Hello everybody, i want to know that is there any possibility that i can register on Free Switch from a location where port 5060 is not allowed from ISP like i am in pakistan and here i m unable to register on FreeSwitch Server using DSL Broadband Service. Regards Shahzad Bhatti
You could bind your Freeswitch server to an alternate UDP port and also set your client to use a different source port. This can be achieved by changing the internal SIP profile XML configuration. You could also DNAT another port to your Freeswitch server's port 5060, although this is not ideal if you can avoid it. Shahzad Bhatti <shahzad.bhatti@g-r-v.com> wrote:
Hello everybody,
i want to know that is there any possibility that i can register on Free Switch from a location where port 5060 is not allowed from ISP like i am in pakistan and here i m unable to register on FreeSwitch Server using DSL Broadband Service.
Regards
Shahzad Bhatti
------------------------------------------------------------------------
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Sent from my mobile, and thus lacking in the refinement one might expect from a fully fledged keyboard. Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0671 Web: http://www.evaristesys.com/, http://www.alexbalashov.com
Besides changing to a non standard port (ie. not using 5060), you could also try to use TLS transport instead of UDP. If signaling traffic is encrypted, it has a better chance of punching through any firewall. Hope that helps. On Tue, Dec 24, 2013 at 4:18 PM, Alex Balashov <abalashov@evaristesys.com>wrote:
You could bind your Freeswitch server to an alternate UDP port and also set your client to use a different source port. This can be achieved by changing the internal SIP profile XML configuration.
You could also DNAT another port to your Freeswitch server's port 5060, although this is not ideal if you can avoid it.
Shahzad Bhatti <shahzad.bhatti@g-r-v.com> wrote:
Hello everybody,
i want to know that is there any possibility that i can register on Free Switch from a location where port 5060 is not allowed from ISP like i am in pakistan and here i m unable to register on FreeSwitch Server using DSL Broadband Service.
Regards
Shahzad Bhatti
------------------------------
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Sent from my mobile, and thus lacking in the refinement one might expect from a fully fledged keyboard.
Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0671 Web: http://www.evaristesys.com/, http://www.alexbalashov.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On 12/24/2013 01:06 PM, Privus 007 wrote:
Besides changing to a non standard port (ie. not using 5060), you could also try to use TLS transport instead of UDP. If signaling traffic is encrypted, it has a better chance of punching through any firewall.
That depends on how it's being blocked. If it's being blocked crudely, on a port level, then they'll just block SIP-TLS (5061) too. If it's being blocked by DPI that identifies the packets as SIP, then switching the utilised ports won't work, and, in fact, encryption and/or tunneling is the only way around it at all. -- Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/
Depending on your client, you can also go through A VPN. This could be done from an iPhone or android phone for example. Guillermo Sent from my iPhone
On 24/12/2013, at 15:15, Alex Balashov <abalashov@evaristesys.com> wrote:
On 12/24/2013 01:06 PM, Privus 007 wrote:
Besides changing to a non standard port (ie. not using 5060), you could also try to use TLS transport instead of UDP. If signaling traffic is encrypted, it has a better chance of punching through any firewall.
That depends on how it's being blocked. If it's being blocked crudely, on a port level, then they'll just block SIP-TLS (5061) too. If it's being blocked by DPI that identifies the packets as SIP, then switching the utilised ports won't work, and, in fact, encryption and/or tunneling is the only way around it at all.
-- Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Alex makes a valid point, success depends completely on the method they are using to block SIP traffic. If they have DPI, then you can try using any number of VPN services to tunnel your SIP traffic (there are literally hundreds of them, though personally I find VyprVPN to be quite good). If your equipment is hardware then you'll need a router/gateway which supports tunnelling traffic (ipsec, openvpn, l2tp, pptp etc), or use some routing trickery by changing the default gateway on the phone to use your computer then set up your computer with ICS (internet connection sharing), assuming you are using Windows, or DNAT if you are using *nix via iptables. Some hardware phones may also allow you to connect via a VPN. Hope this helps Cal On Tue, Dec 24, 2013 at 6:15 PM, Alex Balashov <abalashov@evaristesys.com>wrote:
On 12/24/2013 01:06 PM, Privus 007 wrote:
Besides changing to a non standard port (ie. not using 5060), you could also try to use TLS transport instead of UDP. If signaling traffic is encrypted, it has a better chance of punching through any firewall.
That depends on how it's being blocked. If it's being blocked crudely, on a port level, then they'll just block SIP-TLS (5061) too. If it's being blocked by DPI that identifies the packets as SIP, then switching the utilised ports won't work, and, in fact, encryption and/or tunneling is the only way around it at all.
-- Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On 12/24/2013 01:32 PM, Cal Leeming [Simplicity Media Ltd] wrote:
Some hardware phones may also allow you to connect via a VPN.
Snom is noteworthy for its native support of OpenVPN (at least, in some firmware images, last time I checked, which was a few years ago). -- Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/
Great suggestion. since in Pakistan , we have only port 5060 blocked on Tandum Level . Therefore, changing the SIP port , other than standard port can be a way around. However, some of the ISPs filters on DPI and can be identified even if we use SIP on any other port. In this case, as mentioned above, SIP over TLS is a best match. SIP over TLS hide your signaling but there is always a chance of RTP traffic being monitored in some cases. If you are identified as carrying RTP stream over your network, there is a chance of blacklisting of your IP. VPN is a work around for both cases. But the introduction of delays and high bandwidth consumption is a "not so good" ! Specially when you have bulk of traffic over your network. On Tue, Dec 24, 2013 at 1:35 PM, Alex Balashov <abalashov@evaristesys.com>wrote:
On 12/24/2013 01:32 PM, Cal Leeming [Simplicity Media Ltd] wrote:
Some hardware phones may also allow you to connect via a VPN.
Snom is noteworthy for its native support of OpenVPN (at least, in some firmware images, last time I checked, which was a few years ago).
-- Alex Balashov - Principal Evariste Systems LLC 235 E Ponce de Leon Ave Suite 106 Decatur, GA 30030 United States Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (6)
-
Alex Balashov
-
Cal Leeming [Simplicity Media Ltd]
-
Guillermo Ruiz Camauer
-
Mehroz Ashraf
-
Privus 007
-
Shahzad Bhatti