Firewall rules for telephony

Important: If the firewall supports SIP ALG or other kind of SIP/VoIP packet inspection, it must be disabled. Also ensure that other SIP or VoIP services are disabled, as it might interfere the voice traffic.

Dstny Softphone and desk phones

Outbound rules:

To	Port	Protocol	Service
94.127.49.0/24	80	TCP	HTTP
94.127.49.54 94.127.49.55	123	TCP+UDP	NTP
94.127.49.0/24	443	TCP	HTTPS
94.127.49.224/28	9443	TCP	HTTPS
94.127.49.224/28	5060	TCP+UDP	SIP
94.127.49.224/28	5061	TCP+UDP	SIPS (TLS)
94.127.49.224/28	49152-65535	UDP	RTP

Inbound rules:

From	Port	Protocol	Service
94.127.49.224/28	5060	TCP+UDP	SIP
94.127.49.224/28	5061	TCP+UDP	SIPS (TLS)
94.127.49.224/28	49152-65535	UDP	RTP

 

SIP trunks

Outbound rules:

To	Port	Protocol	Service
94.127.49.224/28	5060	TCP+UDP	SIP
94.127.49.224/28	5061	TCP+UDP	SIPS (TLS)
94.127.49.224/28	49152-65535	UDP	RTP

Inbound rules:

The inbound rules depends on the configuration of the PBX. Typically, SIP uses port 5060 UDP or TCP and SIPS (TLS) uses port 5061 TCP. But if the PBX uses other ports, the firewall rules must be defined accordingly.

Dstny ConnectMe

Outbound rules:

To	Port	Protocol	Service
185.39.124.98 185.39.124.99 185.39.125.98 185.39.125.99 185.39.125.17	443	TCP	HTTPS
94.127.49.224/28	49152-65535	UDP	RTP

Inbound rules:

From	Port	Protocol	Service
94.127.49.224/28	49152-65535	UDP	RTP