Ports used for Vicidial

[eijal]

Hi
I have this kind of installation:
1 ASTERISK/VICIDIAL 1 DATABASE/WEB SERVER
I am trying to use iptables, and I am starting openning this ports:

ASTERISK/VICIDIAL
DNS: sport 53
SIP: dport 5060:5061
IAX: dport 4569 and dport 5036
RTP: dport 10000:20000
MANAGER: dport 5038
SSH: dport 22
NTP: sport 123

DATABASE/WEB SERVER
DNS: sport 53
MYSQL: dport 3306
HTTP: dport 80
SSH: dport 22
NTP: sport 123

May be I am missing some port, because in the cli ASTERISK I don't have the following messages when I run the iptables, and of course the agents can't login to VICIDIAL (They don't hear: you're currently the only person in this conference)

Code: Select all

== Parsing '/etc/asterisk/manager.conf': Found
== Manager 'sendcron' logged on from 192.168.1.2
== Parsing '/etc/asterisk/manager.conf': Found
== Manager 'sendcron' logged on from 192.168.1.2
== Manager 'sendcron' logged off from 192.168.1.2
== Manager 'sendcron' logged off from 192.168.1.2


And when I don't use the iptables, everything is OK

Thanks

[aster1]

are you sue you opened udp ports for rtp .. maybe tcp bymistake ?

from voip-wiki
# SIP on UDP port 5060. Other SIP servers may need TCP port 5060 as well
iptables -A INPUT -p udp -m udp --dport 5004:5082 -j ACCEPT
# IAX2- the IAX protocol
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT
# IAX - most have switched to IAX v2, or ought to
iptables -A INPUT -p udp -m udp --dport 5036 -j ACCEPT
# RTP - the media stream
iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT

[eijal]

I am sorry, I wasn't clear in that. And yes for iax, sip, rtp I opened the UDP ports, here is the detail:

ASTERISK/VICIDIAL
DNS: sport 53 - UDP
SIP: dport 5060:5061 - UDP
IAX: dport 4569 and dport 5036 - UDP
RTP: dport 10000:20000 - UDP
MANAGER: dport 5038 - TCP (then I tried with UDP and nothing, same results)
SSH: dport 22 - TCP
NTP: sport 123 - UDP

DATABASE/WEB SERVER
DNS: sport 53 - UDP
MYSQL: dport 3306 - TCP
HTTP: dport 80 - TCP
SSH: dport 22 - TCP
NTP: sport 123 - UDP

[gardo]

do you have 2 lan cards on your asterisk/vicidial server? this is my setup:

1st nic - live ip address (eth0)
opened ports:

sip: 5060 (udp)
iax: 4569 (udp)
rtp: 10000 to 20000 (udp)
ssh: 222 (tcp)

2nd nic - local ip address (eth1)
-A RH-Firewall-1-INPUT -i eth1 -j ACCEPT

im using centos and manually edited the iptables configuration.

[eijal]

Nop, just one card per server and private IPs

ASTERISK/VICIDIAL
192.168.1.2

DATABASE/WEB SERVER
192.168.1.3