Voip phone

I need help in freeing the udp ports 5060 (SIP) and 5004 (RTP) in order
to use my voip phone. This is how my configuration is:

192.168.1.33 eth1 to which I connected the router 192.168.1.1
192.168.2.33 eth0 to which I connected the phone 192.168.2.1

On my Zyxel router I should have opened the two ports by adding them to
the "SUA" section, then I tried with some iptables rules like

iptables -A INPUT -p udp --destination-port 5060 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -p udp -i eth1 --destination-port 5060 --destination 192.168.2.1 -j ACCEPT
iptables -t nat -A PREROUTING -p udp -i eth1 --destination-port 5060 -j DNAT --to-destination 192.168.2.1

plus I tried these also with the 5004, but none of them seems to have
given any result. It is maybe possible to test whether the ports are
fine with some command instead of directly hacking with the phone?

Well, thanks everybody for your help!
--
Marco Paunescu
(Aka Pau)
Love is the Dance of Eternity

On 04/10/2007 02:41 PM, Marco Paunescu wrote:
> I need help in freeing the udp ports 5060 (SIP) and 5004 (RTP) in order
> to use my voip phone. This is how my configuration is:
>
> 192.168.1.33 eth1 to which I connected the router 192.168.1.1
> 192.168.2.33 eth0 to which I connected the phone 192.168.2.1
>
> On my Zyxel router I should have opened the two ports by adding them to
> the "SUA" section, then I tried with some iptables rules like
>
> iptables -A INPUT -p udp --destination-port 5060 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
> iptables -A FORWARD -p udp -i eth1 --destination-port 5060 --destination 192.168.2.1 -j ACCEPT
> iptables -t nat -A PREROUTING -p udp -i eth1 --destination-port 5060 -j DNAT --to-destination 192.168.2.1
>
> plus I tried these also with the 5004, but none of them seems to have
> given any result. It is maybe possible to test whether the ports are
> fine with some command instead of directly hacking with the phone?
>
> Well, thanks everybody for your help!

I have not tested it as yet, I however, think
http://www.iptel.org/sipalg/ is what you need to read and try.

Hope that helps!
--
Dr Balwinder S "bsd" Dheeman Registered Linux User: #229709
Anu'z Linux@HOME Machines: #168573, 170593, 259192
Chandigarh, UT, 160062, India Gentoo, Fedora, Knoppix/FreeBSD/XP
Home: http://cto.homelinux.net/~bsd/ Visit: http://counter.li.org/