Re: pf+voip

2014-06-02 Thread Ted Bullock
On 2014-05-28 6:39 AM, pae3 wrote: Hi! Don't miss RTP protocol : pass proto tcp to port >< 20001 ah, no RTP will be moving over UDP. -- Ted Bullock

Re: pf+voip

2014-05-29 Thread Stuart Henderson
On 2014-05-27, Andre Ruppert wrote: > You have two different protocols: SIP for signaling und RTP for media. > > Media information between the endpoints is specified in SIP-SDP-packets > (session description protocol). > > SDP-packets contain the original IPs of the VoIP-endpoints, and these > IPs

Re: pf+voip

2014-05-28 Thread Jan Stary
> > Does pf have specific rules for voip, no > >may be example of working pf_rule with voip? I use a hardware phone (Linksys SPA 901), a software SIP client (CSipSimple) on an Android, and pjsua on OpenBSD, all behind OpenBSD NAT. In pf.conf I let "udp port sip" and "tcp port sip" in, and anyth

Re: pf+voip

2014-05-28 Thread pae3
Hi! Don't miss RTP protocol : pass proto tcp to port >< 20001 Alex On 05/27/2014 07:46 PM, Dmitry Petrakoff wrote: Sorry, that was exactly I meant ( OT probably ): The first issue with late hang-up most likely means, that calee hung up and his UAC sent SIP BYE within existing

Re: pf+voip

2014-05-27 Thread Daniel Melameth
On Tue, May 27, 2014 at 3:33 PM, Stuart Henderson wrote: > It just works for me, no special setup needed, no static-port or anything, > just a standard nat-to rule. This is with various devices; snom and gigaset > hardware phones, softclient on android, pjsua on OpenBSD. > > But the SIP servers I

Re: pf+voip

2014-05-27 Thread Stuart Henderson
On 2014/05/27 13:59, Швецов Михаил wrote: > Does pf have specific rules for voip, may be example of working pf_rule with > voip? > > Because for «standart rules» i have problems with voip. > > set skip on lo > > match out on pppoe0 from { em1:network } nat-to (pppoe0) > > block > > pass out >

Re: pf+voip

2014-05-27 Thread Ryan Freeman
On Tue, May 27, 2014 at 01:59:07PM +0400, wrote: > Does pf have specific rules for voip, may be example of working > pf_rule with voip? > > Because for «standart rules» i have problems with voip. > > set skip on lo > > match out on pppoe0 from { em1:network } nat-to (pp

Re: pf+voip

2014-05-27 Thread Dmitry Petrakoff
Sorry, that was exactly I meant ( OT probably ): The first issue with late hang-up most likely means, that calee hung up and his UAC sent SIP BYE within existing dialog. For some reasons either UAS on caller's side or intermediate SIP proxy discarded that BYE. There could be the "same" issue wit

Re: pf+voip

2014-05-27 Thread Andre Ruppert
Tue, 27 May 2014 13:59:07 +0400 Швецов Михаил wrote: > Does pf have specific rules for voip, may be example of working > pf_rule with voip? > > Because for «standart rules» i have problems with voip. > > set skip on lo > > match out on pppoe0 from { em1:network } nat-to (pppoe0) > > block >

Re: pf+voip

2014-05-27 Thread Dahlberg, David
Am Dienstag, den 27.05.2014, 14:15 +0400 schrieb Dmitry Petrakoff: > It is most unlikely the issue of pf or its rules. Simply because your > issues are related to SIP (busy issue) and RTP/phone (voice volume). > Pf does not have any SIP ALG built-in so can't affect VoIP. Well that is not complete

Re: pf+voip

2014-05-27 Thread Dmitry Petrakoff
Hi! It is most unlikely the issue of pf or its rules. Simply because your issues are related to SIP (busy issue) and RTP/phone (voice volume). Pf does not have any SIP ALG built-in so can't affect VoIP. I'd like to suggest you to check busy issue with your VoIP provider or to check out different c

Re: pf+voip

2014-05-27 Thread Stefan Sperling
On Tue, May 27, 2014 at 01:59:07PM +0400, Швецов Михаил wrote: > Does pf have specific rules for voip, may be example of working pf_rule with > voip? > > Because for «standart rules» i have problems with voip. > > set skip on lo > > match out on pppoe0 from { em1:network } nat-to (pppoe0) > > b

pf+voip

2014-05-27 Thread Швецов Михаил
Does pf have specific rules for voip, may be example of working pf_rule with voip? Because for «standart rules» i have problems with voip. set skip on lo match out on pppoe0 from { em1:network } nat-to (pppoe0) block pass out pass in on { em1 } - after hanging up, the line near 3 minutes s

Re: pf + voip security

2007-02-25 Thread Reyk Floeter
On Sun, Feb 25, 2007 at 08:45:25AM +0100, Julien TOUCHE wrote: > is there some plan to make pf voip-aware so it can handle dynamic port > allocation ? > > i suppose answer risks to be no as else, there would be one for ftp (and > not ftp-proxy). So, what openbsd users use to add se

pf + voip security

2007-02-24 Thread Julien TOUCHE
is there some plan to make pf voip-aware so it can handle dynamic port allocation ? i suppose answer risks to be no as else, there would be one for ftp (and not ftp-proxy). So, what openbsd users use to add security to their voip setup except pf and vlan ? thanks Regards Julien