[Serusers] iptables

[Nils Ohlmeier]

Hi,

On Tuesday 06 January 2004 15:01, listas iPfone wrote:
> I need some help in setting up iptables to let sip traffic pass in my
> machine using ser.
>
> There is some doc about it?

AFAIK not, because there is not much to document: SIP uses by default port 
5060 and UDP and TCP as transport protocol.

> Somebody can give me advice?

iptables -A WHATEVER_IS_YOUR_CHAIN -p tcp --dport 5060 -j ACCEPT
iptables -A WHATEVER_IS_YOUR_CHAIN -p udp --dport 5060 -j ACCEPT

Naturally you can add '--sport 5060' if you want to force only SIP-to-SIP 
communication.
Note: all SIP compliant devices should support other ports then 5060, so there 
is no way to guarantee that the SIP devices behind your packet filter do not 
use e.g. port 80 for their communication.

And as there is yet no SIP conntrack helper module, there is currently no way 
to let pass the media of the phone calls in a 'secure' way.

Greets
  Nils