Sip port 5060 is block by Our ISP?? siproxd do help full?



  • Hi,
    i have installed Asterisk(Elastix) installed which is behind pfsense.Currenty i am using NAT Rules to register my remote extensions,
    But Problem is that some of User Complaint unable to register as their ISP has block sip ports ,Is there any way to Solve this problem ,eg Sip traffic is send through http port(80) like Skype through Sip Proxy Server,

    Is Pfsense provide any method like Sip proxy agent ? siproxed pakcaged is the way to do it ?

    i know i can encrypt Sip traffic through Open VPn, But problem is that My Clients don't want to dial Vpn Connections, further some of using Grandstream /Linksys Hard phone ,they don't have openvpn Client Installed. One thing more when Xlite over remote site though OpenVPn , Voice quality is very poor.

    Please guide me , what is the best way.
    Is it Possible that my ISP Can't See Voip traffic is going over their Bandwidth.

    Thanks and waiting.



  • Well, for starters you need to make sure they really are blocking UDP/5060.  If so, siproxd can't help, as it won't affect traffic sent by your remote users (I am understanding you want remote users to connect to your asterisk box?)  If so, you may have issues with the way pfsense NATs things.  I would suggest enabling advanced outbound nat (AON), and in the rule that appears, click on "static port".  If they really are being blocked, you could probably give them another port (like 5080?) and port forward that one to your elastix box too.



  • There is a SIP Outbound Proxy service (www.sippp.com) which bridges SIP signal messages between SIP client and SIP proxy server through UDP ports other than the standard 5060. This way, people can bypass ISP's blocking of port 5060. No need to deploy VPN.



  • I may add that Asterisk (and Elastix 2.0) work fine using a port other than 5060. This might also be a solution for you.


Locked