<![CDATA[Firewall rule to allow SIP traffic]]>Hi all,
Please can someone help with configuring firewall rule to allow my SIP trunk provider traffic through the firewall.

I use Pfsense as my edge firewall/router to the internet, i have a UCM602 on my LAN and now i have configured it for inbound and outbound calls. My provider gave a public IP and he says i should configure my firewall to allow traffic to and from. I have tried and it did work, couldn't call in to get the calls routed to a specified extension on the UCM602.

Please assist in getting this done.

]]>https://forum.netgate.com/topic/196099/firewall-rule-to-allow-sip-trafficRSS for NodeTue, 08 Sep 2026 07:23:24 GMTTue, 21 Jan 2025 15:48:40 GMT60<![CDATA[Reply to Firewall rule to allow SIP traffic on Thu, 23 Jan 2025 13:17:56 GMT]]>@SteveITS Hello Stevel, thanks for your comment. I have been get it working. Did port forwarding like you advised.

]]>https://forum.netgate.com/post/1203725https://forum.netgate.com/post/1203725Thu, 23 Jan 2025 13:17:56 GMT<![CDATA[Reply to Firewall rule to allow SIP traffic on Tue, 21 Jan 2025 23:26:03 GMT]]>@Daq45 said in Firewall rule to allow SIP traffic:

UCM602

Probably want to use static port on it as well.

https://docs.netgate.com/pfsense/en/latest/nat/outbound.html#nat-staticport

]]>https://forum.netgate.com/post/1203505https://forum.netgate.com/post/1203505Tue, 21 Jan 2025 23:26:03 GMT<![CDATA[Reply to Firewall rule to allow SIP traffic on Tue, 21 Jan 2025 21:53:49 GMT]]>@Daq45 That sounds like an appliance you would have on your LAN? Does it tell you what ports it needs open? You would typically create a NAT port forward for each of those to the LAN IP of this device, so the Internet could connect to it.

Bonus: you can restrict NAT forwards to specific source IPs so as to not allow the entire Internet.

]]>https://forum.netgate.com/post/1203497https://forum.netgate.com/post/1203497Tue, 21 Jan 2025 21:53:49 GMT