Reccomendations for SIP/QoS/URL Filter/Firewall

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Reccomendations for SIP/QoS/URL Filter/Firewall

Aaroona

3193 posts

Uber Geek

#63255 23-Jun-2010 14:42

At the moment, I have just installed IpCop, and while its pretty good, and is extremely light weight.. I am having issues with upnp (for my sip phone).

So I thought I would take a look-see around the net and came across some options.

Basically what I want is:
1. QoS
2. A sip server (so I can connect it to my VOIP account, then route calls to extensions within my network)
3. Firewall is a give-in.
4. URL Filter (though not really needed)
5. DHCP + DNS for local clients.

These are my main things I'm looking for, and from what I see, there are a couple of options:

1. Endian
2. Ebox
3. ClearOS

This will obviously be used as a gateway for my network (Modem --> Gateway --> local network)

Do you lot any have any recommendations as far as this goes? I could really use the guidance.

webwat

2036 posts

Uber Geek

Trusted

#344903 24-Jun-2010 14:27

Yeah dont use UPnP with a router for SIP...

Either forward the VoIP ports directly to your SIP PBX or put the PBX onto IPCop's DMZ/orange zone. If you dont have a local PBX then turn OFF each phone's NAT options and turn on anything that might work like a "keep alive" option. As long as your phone keeps checking its SIP proxy then IPCop should keep the return connection open.

Not recommended top run SIP on your firewall (it creates vulnerabilities on the firewall instead of securing the SIP server) but if you really have to then I believe pfSense firewall is more secure than IPCop and has a Asterisk addon.

Time to find a new industry!

Aaroona

3193 posts

Uber Geek

#344909 24-Jun-2010 14:39

webwat: Yeah dont use UPnP with a router for SIP...

Either forward the VoIP ports directly to your SIP PBX or put the PBX onto IPCop's DMZ/orange zone. If you dont have a local PBX then turn OFF each phone's NAT options and turn on anything that might work like a "keep alive" option. As long as your phone keeps checking its SIP proxy then IPCop should keep the return connection open.

Not recommended top run SIP on your firewall (it creates vulnerabilities on the firewall instead of securing the SIP server) but if you really have to then I believe pfSense firewall is more secure than IPCop and has a Asterisk addon.

Hi thanks for your reply.

I wish I didnt have to run a SIP server on top of my firewall, but unfortunately I don't have a spare computer to use as a server (since I'm already using the spare to run as the firewall).

With PFsense, does the asterisk addon make it so I can have extension numbers for a few phones i have around here, so that i can ring extensions, and then if i can get VOIP call, I can transfer them? and all that good stuff?

I cant seem to find the addon, but I am looking for it now.

Also, do you have any experience with eBox? Its looking quite good atm.