Join.ME - SIP/NAT configuration

arcaic

Hi all,

New pfSense user and not especially familiar with firewall config and NAT.

I have pfSense 2.4.1-RELEASE running and all is working fine with our mix of Mac and windows machines apart from Join.me - "web-based collaboration software application for screen-sharing and online meetings".

Laptop users who want to use this can use it fine outside of our network but it wont work when they are behind the pfSense firewall. I've tried it on a couple of machines and non of them will work. They are making audio only calls apparently.

Join.me support are not a lot of help in that they say do the following….

You may need to check your firewall settings.

Quote....

The join.me internet calling service uses the SIP standard to facilitate communication between the computer and the conference service. In some environments, this may require certain ports and IP ranges to be opened in your firewall.

The following port ranges should be allowed through your firewall:

5060-5100 TCP Outbound (SIP Signaling ports)
7800-32000 UDP Outbound (Voice Traffic ports)

These ports should be opened to a specific IP address range:

66.151.98.0/26
189.8.82.112/28
199.195.235.64/28
209.197.28.0/25
216.133.231.0/26
117.120.4.96/28
115.187.137.232/29
185.167.188.0/22

End Quote

After some searching of the net and this forum I have taken this to mean the following...

1. Change the outbound NAT mode to manual

2. Add two outbound mappings at top of mappings list, 1 for upd and one for tcp as follows...

Interface, Source, Source Port, Destination, Destination Port, NAT Address, NAT Port, Static Port
WAN, 192.168.0.0/24, udp/*, JOINMEADDRESSES, udp/SIPUDPPorts, WAN address, , Static
WAN, 192.168.0.0/24, tcp/, JOINMEADDRESSES, tcp/SIPTCPPorts, WAN address, *, Static

JOINMEADDRESSES is an alias with all the IP ranges specified by Join.me support (above).
SIPUDPPorts and SIPTCPPorts are the port ranges specified by Join.me support (above).

Anyway after doing that it still doesn't work.

Can anyone help/nudge me in the right direction? I feel I'm probably missing something somewhere but lost as to where to look.

Many thanks

Andy

arcaic

I'm still stuck on this.

Is there anyone who can please give me some direction on how to setup pfSense for Join.me or possibly help me debug what is going on?

Andy