That depends on the software you will use. Usually ser listens and sends on port 5060. Many SIP clients use dynamic ports for SIP and for RTP.
Thus, for a SIP proxy allow: incoming: *:* -> ser.ip.address:5060 outgoing: ser.ip.address:5060 -> *:*
If oyu use mediaproxy/rtpproxy, you have allow traffic from/to the ports used by the rtpproxy.
Also make sure to allow DNS, and radius/mysql/postgres if needed.
klaus
harry gaillac wrote:
Hello,
What are the policies to apply in order to secure a network with Voip context?
Which ports must be openned for signalling and which ports must be openned for rtp traffic incoming/outgoing ?
Regards Harry
___________________________________________________________________________ Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger Téléchargez cette version sur http://fr.messenger.yahoo.com
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers