[Asterisk-Users] IPTables

Joel Newkirk
2005-04-19T07:19:20Z

Michael Sanders wrote:
>
>
> Hi,
>
> Ive got a linux firewall with Private/Public ip address on two nics.I
> need clients to connect via SIP from the private network to a public
> Asterisk PBX.Ive tried the the configs from the wiki and have not come
> right.
>
> Has anyone managed to get this working and if so please share the
> configs or point me in the right direction.
>
> Thanks
>
> MS

Can you get the simpler case working, with just a single client behind
the firewall?  Is your problem in getting multiple clients working, or
getting one working via NAT, or getting one working through the firewall
filtering, or SIP works but no audio, or what?  Single or multiple
public IPs?  More info would have helped.

If you're talking about multiple clients hidden behind a single public
IP, you should be able to do that either by configuring each client on a
different port (5060/5061/5062 etc) or with 'nat keepalive' (on some
phones at least).

If you have multiple public IPs available, then putting each SIP client
on a different public IP solves the complications - then you just have
to deal with the simple NAT case.  (misidentification, without
misrouting too)  In this case, if you can get one phone working then you
can get them all working, each with a different public IP but the same
essential configuration.

By 'public asterisk pbx' do you mean a public voip service, or an
asterisk server you control which is on a public IP?  Because if you
control both ends, you can setup a VPN.

If you specifically need help with the iptables setup, you're probably
better off here:
https://lists.netfilter.org/mailman/listinfo/netfilter
netfilter-request@lists.netfilter.org?subject=subscribe

(although I can try to answer iptables questions - boss calls me
'firewalldude' for a reason ;)

j