bizzare port issues on my router

Forums › VoIP › bizzare port issues on my router

drbob500

30 posts

Geek

#105338 2-Jul-2012 20:47

I have my IP PBX working, it works with remote extensions and everything works perfectly,

I have ports open on my router forwarding to the internal IP address of the PBX but when I check whether I can see if the ports are open from canyouseeme.org it tells me port 5060 isn't open, yet it is, is this weird or have I missed something really obvious?

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#649777 2-Jul-2012 20:59

It's not surprising, it depends entirely what it's doing to test for open ports.

You really need to understand the deeper aspects if TCP/IP to understand why, but in effect most scanning is TCP based since you can scan for SYN packets or responses.

SIP typically uses UDP which is a connectionless protocol.

drbob500

30 posts

Geek

#649779 2-Jul-2012 21:06

it just seemed bizzare as none of the SIP ports actually showed open yet all the ports for the microsoft crap do, but she works a treat

I am loving my IP pbx though after a couple of little teething issues its run without fault or even a restart for 6 months,

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#649798 2-Jul-2012 21:43

What sort of PBX are you using? You clearly need to be aware of the massive security implications of leaving a PBX with port 5060 open to the internet. Unless you have good security in place it's not a case of if it will be compromised, but when.

drbob500

30 posts

Geek

#649800 2-Jul-2012 21:47

Its lurking behind an cisco ASA 5505 on a private VLAN segmented off from the rest of the network,

and the wife has a newfoundland so if anyone gets in she'll set him onto them after she chews their ear off

insane

3324 posts

Uber Geek
+1 received by user: 1006

ID Verified

Trusted

2degrees

Subscriber

#649816 2-Jul-2012 22:58

Being behind an ASA with port 5060 open to the world isn't exactly any safer than having it's arse hanging out on the internet unprotected.