VoIP example

For instance, if the new Internet access (IPBrick interface eth2) aims VoIP traffic (port 5060, 5090 and after the 35000 - UDP) you have to insert the following rules in Advanced Configurations - Network - Firewall - Insert:

1. Rule to masquerade the outgoing traffic for the eth2 interface;
   • Type: General configuration;
   • Rule: POSTROUTING;
   • Interface: eth2;
   • Protocol: TCP;
   • Module: Leave blank;
   • Source IP: Leave blank;
   • Origin port: Leave blank;
   • Destination IP: Leave blank;
   • Destination port: Leave blank;
   • Identifier: Leave blank;
   • Politics: SNAT;
   • Value: eth2 IP;

2. Rules that accept incoming traffic for the IPBrick VoIP ports;

   Port 5060 UDP:

   • Type: General configuration;
   • Rule: INPUT;
   • Interface: eth2;
   • Protocol: UDP;
   • Module: Leave blank;
   • Source IP: Leave blank;
   • Origin port: Leave blank;
   • Destination IP: Leave blank;
   • Destination port: 5060;
   • Identifier: Leave blank;
   • Politics: ACCEPT

   Port 5060 TCP:

   • Type: General configuration;
   • Rule: INPUT;
   • Interface: eth2;
   • Protocol: TCP;
   • Module: Leave blank;
   • Source IP: Leave blank;
   • Origin port: Leave blank;
   • Destination IP: Leave blank;
   • Destination port: 5060;
   • Identifier: Leave blank;
   • Politics: ACCEPT

   Port 5090 UDP:

   • Type: General configuration;
   • Rule: INPUT;
   • Interface: eth2;
   • Protocol: UDP;
   • Module: Leave blank;
   • Source IP: Leave blank;
   • Origin port: Leave blank;
   • Destination IP: Leave blank;
   • Destination port: 5090;
   • Identifier: Leave blank;
   • Politics: ACCEPT

   Up to 35000 UDP:

   • Type: General configuration;
   • Rule: INPUT;
   • Interface: eth2;
   • Protocol: UDP;
   • Module: Leave blank;
   • Source IP: Leave blank;
   • Origin port: Leave blank;
   • Destination IP: Leave blank;
   • Destination port: 35000:
   • Identifier: Leave blank;
   • Politics: ACCEPT

3. Rules to forward outgoing VoIP traffic for eth2

   Port 5060 UDP:

   • Type: General configuration;
   • Rule: OUTPUT;
   • Interface: eth1;
   • Protocol: UDP;
   • Module: Leave blank;
   • Source IP: eth1 IP;
   • Origin port: 5060;
   • Destination IP: ! eth1 IP;
   • Destination port: Leave blank;
   • Identifier: Leave blank;
   • Politics: MARK;
   • Value: 1 (firewall tag);

   Port 5060 TCP:

   • Type: General configuration;
   • Rule: OUTPUT;
   • Interface: eth1;
   • Protocol: TCP;
   • Module: Leave blank;
   • Source IP: eth1 IP;
   • Origin port: 5060;
   • Destination IP: ! eth1 IP;
   • Destination port: Leave blank;
   • Identifier: Leave blank;
   • Politics: MARK;
   • Value: 1 (firewall tag);

   Port 5090 UDP:

   • Type: General configuration;
   • Rule: OUTPUT;
   • Interface: eth1;
   • Protocol: UDP;
   • Module: Leave blank;
   • Source IP: eth1 IP;
   • Origin port: 5090;
   • Destination IP: ! eth1 IP;
   • Destination port: Leave blank;
   • Identifier: Leave blank;
   • Politics: MARK;
   • Value: 1 (firewall tag);

   Up to port 35000 UDP:

   • Type: General configuration;
   • Rule: OUTPUT;
   • Interface: eth1;
   • Protocol: UDP;
   • Module: Leave blank;
   • Source IP: 35000: ;
   • Origin port: Leave blank;
   • Destination IP: ! eth1 IP;
   • Destination port: Leave blank;
   • Identifier: Leave blank;
   • Politics: MARK;
   • Value: 1 (firewall tag);

4. In IPBrick Menu: VoIP - Registered Phones - Options, modify the 2^ofield for the IPBrick's eth2 IP;