I have a remote pbx. I am trying to find secure iptables. This is what I have so far.
REMOTE PBX IP 1.1.1.1
MY PHONE NET 2.2.2.2
iptables -A INPUT -s 2.2.2.2 -j ACCEPT
(This should take care of port 80,5060,22, etc… It is secure only I can connect to it)
iptables -A INPUT -p udp --dport 5060 -s tampa.voip.ms -j ACCEPT
(this rule opens up port 5060 only to my VOIP provider.)
Now I am trying to figure out RTP from here. I don’t just want to open up 10000:20000 to everybody. I want to know what uses the rtp ports? my voip provider can come in on port 5060 but do I need to
iptables -A INPUT -p udp --dport 10000:20000 -s tampa.voip.ms -j ACCEPT
What connects to my pbx using RTP ports? is it the trunk? is it my sip phones? If the trunk doesn’t use the rtp ports then
I should be good to go as my phones would be allowed to connect with this
iptables -A INPUT -s 2.2.2.2 -j ACCEPT
…Thanks