General Questions

Hi all,

i've been scouring the web for this info, but no definitive answers yet, and i need to know things before i decide on my new provider.

Has anyone got a working setup with an IP phone (phone that doesn't use the PC) behind a Monowall? Is Monowall capable of this?
We might move to Compuserve (because we're moving house) but i want to know for sure that it works.
My idea is to put the ADSL modem in bridge mode so Monowall can take care of the firewalling business, and use an IP phone from the DMZ.
I think Compuserve uses SIP servers.

Thanks for any info!

Yes, it works fine.  You can use a "DMZ" setup or just port forward the appropriate ports from the WAN IP address to the phone.

Hmmm...thanks for your reply, but does this mean i need to redirect 5060 and the whole range of 10000-20000 if we want to be reachable for others?
Doesn't that wide of a portrange interfere with other applications(like XBox Live)?

I use Vonage on my DMZ port and didn't forward any ports.

Roy...

I use Vonage on a standard LAN port, no port forwarding or dmz. Works great.

Wow! No forwarding at all?
Well, at least this gives me some confidence, but i'm not sure how people could initiate a call to us (instead of me calling out) since Monowall doesn't use any SIP proxy that i know of.
Anyway, great news...i'll be getting myself a Siemens S450 IP phone soon then

I have successfully managed to use use a Avaya 4625 and Avaya 4610 behind m0n0wall, both running the VPNRemote Phone firmwares. I did not have to do any type of port forwarding.

I belive most of these services utalize a call manager and VPN-ish connections between the phone and the managers, so you probably don't need to forward anything.  It would make sense, doing it that way would increase the market penetration and simplify the setup / install for the average person.

Right...i found some Siemens FAQs, and it seems they don't use a VPN'ish connection.
Anyway, when i forward port 5060 (SIP) and 5004 (RTP) to the phone's IP address i should be fine according to their documentation.

hi,

i have 2 boxes in my dmz. one of them is a dualphone 3088. i have forwarded some ports. bear in mind that is an skype phone what is may be different then your but it should work.

good luck,
bt

AFAIK Skype's a little bit different and easier to set up behind firewall, i think it's able to use voice routing via other Skype users to circumvent certain problems.

Anyway, i know now it should work, just a bit of fiddling with a few ports and i'm set.
Can't wait to try it out 

I run a Vood VoIP adapter, and while many have had no problems with this adapter and m0n0wll against other VoIP services, the service I use obviously have issues with this combination. I portforwarded the required ports, still the only thing I got working with m0n0wall was outgoing calls, never incoming. But the thing is, it works without a problem with IPCop, which I run now only because of this.

Unfortunately, I'm not at all satisfied with IPCop, it has a pretty bad interface and it's feels a lot less professional and a lot more shakey than m0n0wall did. And its seem to eat space out-of-the-box aswell, which doesn't work well with the 256MB CF-card I use.

Can anyone tell why this is?

edit: I should add that I haven't tested DMZ, since I don't know how to do that.

I run a Vood VoIP adapter, and while many have had no problems with this adapter and m0n0wll against other VoIP services, the service I use obviously have issues with this combination. I portforwarded the required ports, still the only thing I got working with m0n0wall was outgoing calls, never incoming. But the thing is, it works without a problem with IPCop, which I run now only because of this.

Have you disabled source port mapping through the use of Advanced Outbound NAT? I don't believe Linux remaps ports (which is insecure, but doesn't break some things like some VoIP services and a few proprietary VPN's).