similar to: Asterisk & Pix firewalls

Hello, I am not too familiar with the settings in our PIX (learning though). Here is the only access-list setting that we have in place for Asterisk: access-list acl-prod permit udp any host EXTERNAL_*_IP_HERE eq 5060 In rtp.conf we are allowing ports 10000 - 20000. We are not using SIP Fixup in our PIX due to firmware version. How do I go about adding the ability for udp ports 10000 - 20000

does anyone have a sip working through a cisco pix firewall? i can get the phone to register and the call to be negotiated, but as soon as the call is answered there is no sound and the call ends immediately. im sure this is due to the RTP negotiation being rejected by the pix. any helpful ways around this? right now my only solution is to put a small box outside the firewall and IAX the

hey friends, I am looking for a free open source software (web based or application) through which I can monitor the Pix Firewall. What it should show Interface status or traffic , VPN Connectivity status, CPU Status, Memory Status etc. I am also running DHCP server on Pix Firewall (due to some reasons) If it can monitor that also means showing how many IPAddresses has been assigned, to whom,

Hi, I have about 10 Cisco 7960s behind a PIX 506E (IOS v6.3) firewall. After some period of time, asterisk says that some of them are unreachable, and the phones lose their registration. The only way to make the phones recover is to clear the NAT translation tables for the phones on the PIX (clear xlate...) Does anyone know how to fix this? As you can imagine, it is quite annoying. And it does not

I cannot get incoming calls to sip phones behind a PIX to work, outgoing is fine. Asterisk (Public IP) --> Internet --> PIX (NAT) --> Sip Phones I have tried no fixup protocol sip, I have punched a hole in the Pix allowing anything from the Asterisk box into the network, still no incoming. I have done all the Wiki suggests in regarding to NAT. Is their a trick getting the

Hi, I have the Cisco PIX 506 firewall right in front of the asterisk and I am getting a one-way audio. I need your help/guidance to resolve this problem. I have the "fixups" disabled for SIP in the Cisco PIX 506. Any help rendered by you in this subject is greatly appreciated. I have been breaking my head trying to resolve this problem for more than one month. I have included the

Hello, long time lurker, first time writer.... We have the following set up ITSP | | Internet | | Cisco 2600 | | Switch----Asterisk Server running 1.0.9(has public ip) | | Cisco 515e Pix Firewall running Pix OS 5.3(run's a class c 1-to-1 nat and pat) | | Grandstream GXP-2000(run latest fw from grandstream site 1.0.1.9) The grandstream registers with the public asterisk server fine. I even

Can anyone point me in a good direction for configuring SIP through a PIX using 1:1 NAT. I have read anything I could get my hands on and tried them all with very little success. I can get it to work through the cheap little cable modem routers, but not this PIX. I -can- make a direct SIP call using the IP address of the * server (ie.exten@ipaddr), but when I do that * still doesn't

Is there anything special that anyone here has had to do to get an Aastra phone (on the Internet) to talk to Asterisk behind a PIX firewall? Ports 10000-20000 UDP are open on the PIX and forwarding to the Asterisk server. The Asterisk server's RTP.CONF is set to use 10000-20000. The phone registers, and will place AND receive calls, however, no audio is passed. The phone is an Aastra

Hi List Just a little bit OT, but then again perhaps an information that could be of great value for a lot of administrators !! Does anyone have experience with how to setup VoIP QoS for outgoing data through a Cisco PIX (515) ? I believe that it should be possible to give higher priority to outgoing VoIP packets. This is due to the problem of ADSL as the UpStream data rate is 1/4 of the

Hi everyone, I'm very new to all this, so please forgive me if I have the terminology mixed-up. We are preparing to install an Asterisk IP PBX over the weekend and I have an issue with the Polycom SP 500 phones we are trying to use. My problem is regarding DHCP. Our DHCP server is our Cisco PIX 501 firewall. I've specified option 66 and the phones connect to the FTP server

Does Kid Pix Studio Deluxe run under Wine? An elementary school I visited recently was running that program on all their Windows machines, and wouldn't consider switching to Linux unless it was supported. winehq.com doesn't resolve in DNS for me tonight :-( so I can't check the database. I don't have a copy myself, so I can't test it personally. (Hmm, maybe I should get

Anyone got a resource on setting up a CentOS box to connect to a Cisco PIX 5xx VPN using IPSec? I don't know if it matters but an important part of functionality would be split tunneling, I need to maintain that from the windows side of functionality. Thanks! jlc

Hi, We have a shorewall firewall running on SUSE 10. We have three nic''s, Lan, DMZ and Internet. We also have a Cisco Pix 506e. We moved from sending all our traffic through the pix to using the Suse box yesterday. The PIX is in the DMZ, with a connection to the LAN switch, the idea being that VPN users can connect to the pix to the lan. The Pix is on the 10.0.1.x subnet, the lan is

https://bugzilla.mindrot.org/show_bug.cgi?id=1404 Summary: Make keepalive work properly with Cisco PIX/ASA boxes Classification: Unclassified Product: Portable OpenSSH Version: 4.7p1 Platform: Other OS/Version: Linux Status: NEW Severity: enhancement Priority: P2 Component: sshd AssignedTo:

This is kind of an odd request so I''ve got the asbestos undies on. I have a client who currently has a layer 3 switch plugged into a cisco pix. Routing is handled via RIP and now the client wants to insert a linux box running shorewall behind the PIX and in front of the switch to act as a content filter+backup firewall. The immediate problem I forsee happening is that RIP broadcasts to

Ok, I just setup the log file and this is what I see there: rsync on cdrive/Temp/pix.log from admx (141.214.137.139) transfer interrupted (code 3) at flist.c(812) I had to change [cdrive] from path = "c:\" to path = c: to get rid of '@ERROR: chdir failed' error. I am getting close but still need some help. Thanks in advance. Nishi > -----Original Message----- From:

Hi list, I am trying to create a VPN between two different locations. On the first location we have a cisco pix 525 Natting the internal 192.168.100.x network, while on the second location we have a Centos3 box Natting via iptables the internal 192.168.10.x netowrk. My goal is to connect this 2 over the internet via IPsec. I created the IPsec Net2Net via the network configuration graphic

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: wine_weirdness.ppt Type: application/vnd.ms-powerpoint Size: 33792 bytes Desc: wine_weirdness.ppt Url : http://www.winehq.org/pipermail/wine-users/attachments/20041110/d6ae19a2/wine_weirdness.ppt

Hi, I just wonder if I can replace PIX firewall with machine having IPTable as my firewall. I want to control our firewall but due to the lack of knowledge in configuring PIX, i want to replace it with Linux or BSD. I do not have the time now to learn the complexity of PIX and yet I want to know what happening in my firewall and control it as much as possible. Do you think it is justifiable for