Does anybody know what the custom_fw_modules is for? and how does one get to use it? i have siproxd on my nat router and it did solved my sip nat issues. however it seem thart siproxd sort of bypasses my firewall. that is even if the ip phones ip and mac is NOT yet included in my router program to be allowed to make out connections, the phones could still register and make calls!
_jeff
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
The custom_fw_module is intended to carry customer specific code to handle firewall rules dynamically. Check the example code on how to use the interface. It is called whenever an RTP datastream is started or stopped.
The "bypassing" of your firewall that you observe probably may be caused by your FW rules. As siproxd does RELAY RTP traffic, the outbound interface rules must consider traffic to/from siproxd and the inbound interface rules must consider traffic between siproxd and the locally connected phones. Rules in your FORWARDing set do *not* have any effect, as the traffic is not forwarded by the router but relayed by the application siproxd.
/Thomas
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi Everyone!
Does anybody know what the custom_fw_modules is for? and how does one get to use it? i have siproxd on my nat router and it did solved my sip nat issues. however it seem thart siproxd sort of bypasses my firewall. that is even if the ip phones ip and mac is NOT yet included in my router program to be allowed to make out connections, the phones could still register and make calls!
_jeff
The custom_fw_module is intended to carry customer specific code to handle firewall rules dynamically. Check the example code on how to use the interface. It is called whenever an RTP datastream is started or stopped.
The "bypassing" of your firewall that you observe probably may be caused by your FW rules. As siproxd does RELAY RTP traffic, the outbound interface rules must consider traffic to/from siproxd and the inbound interface rules must consider traffic between siproxd and the locally connected phones. Rules in your FORWARDing set do *not* have any effect, as the traffic is not forwarded by the router but relayed by the application siproxd.
/Thomas