Disable UPnP for "internal" port only?
I see that I can run ./freeswitch -nonat to completely disable the use of UPnP. But what if I only want FS to stop opening a path to its internal registration port (5060)? All the devices that I want to register are on my home network, behind the NAT, and I'd prefer not to expose the internal registration port to hackers until I need to. (And then, only after I have learned more about security measures that I can implement).
nonat and ip_nat_sip module from netfilter would be a better choice in this situation On Mon, Dec 20, 2010 at 9:19 AM, Tom C <mel0torme@gmail.com> wrote:
I see that I can run ./freeswitch -nonat to completely disable the use of UPnP.
But what if I only want FS to stop opening a path to its internal registration port (5060)? All the devices that I want to register are on my home network, behind the NAT, and I'd prefer not to expose the internal registration port to hackers until I need to. (And then, only after I have learned more about security measures that I can implement).
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks for the reply. I actually just routed the appropriate ports via port forwarding in my router, and now -nonat does exactly what I want it to do.
participants (2)
-
curriegrad2004
-
Tom C