How to make outbound NAT to be send using static ports?



  • Hello All,

    We have pfsense 1.2.3 and love this really powerfull software firewall. Only the problem is with VoIP and Trixbox that is behind it. Remote phones can't register using SIP and teher is no AUDIO using RTP ports 10000-20000.

    I know that NAT outbound must be as Manual Outbound NAT rule generation (Advanced Outbound NAT (AON)) with:

    Interface Source Source Port Destination Destination Port NAT Address NAT Port Static Port

    WAN    192.168.10.0/24  *  *  *  *  *                                                            YES

    But ports that are leaving pfsense are 457800 UDP not 10000-20000. How can I make pfsense to send RTP ports out using 10000-20000 UDP?

    This is trivial becasue if pfsense send RTP trafic on low or high ports these ports are blocked by other firewall. Also how to send 5060-5070 TCP/UDP out as static ports.

    Thank You for any advices.  Adi



  • Please use the search function. This has been covered many, many times.


Locked