Re: PF and the old SIP issue

2008-11-20 Thread Martin Gignac
>> unless you anchor/proxy all media as well on the >> Asterisk (I don't know Asterisk so I don't know if it does that). > > it does, and most people run it that way (canreinvite=no). Good to know. Thanks, -Martin

Re: PF and the old SIP issue

2008-11-20 Thread Stuart Henderson
On 2008-11-20, Girish Venkatachalam <[EMAIL PROTECTED]> wrote: > On 19:32:58 Nov 19, Jason Beaudoin wrote: >> On Wed, Nov 19, 2008 at 11:24 AM, Mikel Lindsaar <[EMAIL PROTECTED]> wrote: >> > >> > FWIW I run about 8 asterisk servers behind openbsd firewalls. I have found >> > the most non-problemat

Re: PF and the old SIP issue

2008-11-20 Thread Stuart Henderson
On 2008-11-20, Don Jackson <[EMAIL PROTECTED]> wrote: > It would "sure be nice" if someone would create an OpenBSD port of > FreeSwitch. I started but it doesn't work yet. If anyone's interested in picking it up, mail me, but it is quite a challenge. Lots of things are built internally that need

Re: PF and the old SIP issue

2008-11-20 Thread Stuart Henderson
On 2008-11-20, Martin Gignac <[EMAIL PROTECTED]> wrote: > unless you anchor/proxy all media as well on the > Asterisk (I don't know Asterisk so I don't know if it does that). it does, and most people run it that way (canreinvite=no).

Re: PF and the old SIP issue

2008-11-19 Thread Martin Gignac
>> What do you mean exactly by "just works"? Are the external phones >> supposed to talk with the internal phones? > > Not directly, they go through the server I'm guessing only the SIP signalling goes through the Asterisk server, and not the RTP media (i.e. you don't do any kind of media anchorin

Re: PF and the old SIP issue

2008-11-19 Thread Don Jackson
On Nov 19, 2008, at 6:39 PM, Girish Venkatachalam wrote: Slightly off topic but since many people do not like the horrible Asterisk code and design ( no offense meant) and of course the sucky GPL license, whatever is happening on a BSD licensed Asterisk implementation? I mean an EPABX in sof

Re: PF and the old SIP issue

2008-11-19 Thread Girish Venkatachalam
On 19:32:58 Nov 19, Jason Beaudoin wrote: > On Wed, Nov 19, 2008 at 11:24 AM, Mikel Lindsaar <[EMAIL PROTECTED]> wrote: > > > > FWIW I run about 8 asterisk servers behind openbsd firewalls. I have found > > the most non-problematic way to run them has been by using the asterisk > > servers as a SI

Re: PF and the old SIP issue

2008-11-19 Thread Jason Beaudoin
On Wed, Nov 19, 2008 at 11:24 AM, Mikel Lindsaar <[EMAIL PROTECTED]> wrote: > On Thu, Nov 20, 2008 at 1:44 AM, marrandy <[EMAIL PROTECTED]>wrote: > >> On Wednesday 19 November 2008 09:07:31 you wrote: >> > > OpenBSD PF firewall consisting of ext, DMZ, internal/private >> interfaces. >> > > VOIP ser

Re: PF and the old SIP issue

2008-11-19 Thread Stuart Henderson
On 2008-11-19, Mikel Lindsaar <[EMAIL PROTECTED]> wrote: > Outgoing from the asterisk server is usually a no brainer, you might want to > set pf to be conservative on reclaiming idle states though, this means setting udp.multiple, "set optimization" only affects the state timers for TCP connection

Re: PF and the old SIP issue

2008-11-19 Thread marrandy
On Wednesday 19 November 2008 11:24:39 Mikel Lindsaar wrote: > FWIW I run about 8 asterisk servers behind openbsd firewalls. I have found > the most non-problematic way to run them has been by using the asterisk > servers as a SIP proxy for your SIP clients and making sure that > canreinvite in a

Re: PF and the old SIP issue

2008-11-19 Thread Mikel Lindsaar
On Thu, Nov 20, 2008 at 1:44 AM, marrandy <[EMAIL PROTECTED]>wrote: > On Wednesday 19 November 2008 09:07:31 you wrote: > > > OpenBSD PF firewall consisting of ext, DMZ, internal/private > interfaces. > > > VOIP server sitting in the DMZ. > > > Multiple (pick any number, 5, 10, 100) SIP phones in

Re: PF and the old SIP issue

2008-11-19 Thread Stuart Henderson
On 2008-11-19, marrandy <[EMAIL PROTECTED]> wrote: > >> Does it use TCP and/or >> UDP for SIP signalling? What is the port range used on the SIP phones >> for RTP/RTCP? > > Standard ports. The SIP phones register with the asterisk box. RTP does not have such a thing as "standard ports". Ther

Re: PF and the old SIP issue

2008-11-19 Thread marrandy
On Wednesday 19 November 2008 09:07:31 you wrote: > > OpenBSD PF firewall consisting of ext, DMZ, internal/private interfaces. > > VOIP server sitting in the DMZ. > > Multiple (pick any number, 5, 10, 100) SIP phones in the private LAN. > > Multiple mobile (pick any number, 5, 10, 100) SIP phones a

Re: PF and the old SIP issue

2008-11-19 Thread Martin Gignac
> OpenBSD PF firewall consisting of ext, DMZ, internal/private interfaces. > VOIP server sitting in the DMZ. > Multiple (pick any number, 5, 10, 100) SIP phones in the private LAN. > Multiple mobile (pick any number, 5, 10, 100) SIP phones anywhere in the USA. > (NOTE: Mobile means they are carried

PF and the old SIP issue

2008-11-19 Thread marrandy
First, I've googled, searched the logs, found some small SIP stuff etc. but am interested in peoples opinions on successfull larger scale SIP use via PF. Intro. OpenBSD PF firewall consisting of ext, DMZ, internal/private interfaces. VOIP server sitting in the DMZ. Multiple (pick any number, 5,