How to configure SIP/VOIP client under pfsense



  • Hi,

    I am using pfsense to connect the LAN to external PBX server. I am using SIP soft phones. How can i configure the pfsense to allow SIP-VOIP traffic between the server and my LAN. your help will be highly appreciated.

    Thank You



  • The pfSense default configuration will allow any traffic from LAN so you ought to be able to connect from LAN to the PBX server.

    However the default configuration will block "unsolicited" SIP traffic from the external PBX. You will need to add a port forward rule to direct SIP traffic to the appropriate system on your LAN.





  • hi,

    I searched internet so many times and read the link you provided. but something wrong. I want to conect more than one systems to pbx server.when I tried to connect without pfsense in between LAN and PBX, it worked perfectly.



  • @sareeshmnair:

    I want to conect more than one systems to pbx server.when I tried to connect without pfsense in between LAN and PBX, it worked perfectly.

    You will need to provide more information. I have a pfSense system between my VOIP provider and my home network. Sipdroid (soft phone) on my Android phone reports that it connects to my VOIP provider. Twinkle (soft phone) on three different Linux systems reports that it connects to my VOIP provider and today I had a three minute call from Australia to Thailand from one of the systems running Twinkle.

    Do these multiple systems use the same authentication codes? Do they attempt connect to the VOIP provider concurrently?

    I suggest you simplify your problem: start with one system. Does it connect to the VOIP provider? If not, get a packet capture of the attempt. If so, can you make a call? If not, what is reported? etc …

    I have not found VOIP easy to configure. Some of the softphones have lots of options and I have found it hard to guess what information needed to be provided.



  • I m from india.currently we are using hardphones and sip adapters without pfsense.I tried using 3cx softphone ( dnt know which one is best softphone ) to connect my server located in usa.The locations are connected via IMPLS circuit.the authentication to the server is using different extensition number and password.I can successfully ping and telnet to 5060 port of the server.But softphone cannot work:-(.



  • @sareeshmnair:

    I can successfully ping and telnet to 5060 port of the server.

    telnet runs over TCP. SIP usually runs over UDP. Success with Telnet might not be a good indication there is a SIP over UDP path to the server. (An upstream firewall might block UDP or the SIP port.)

    If you want more detailed help you will need to give more information.



  • Hi,

    i am attaching my network diagram.Please check help me to configure the pfsense( the sip adapter-phone system working perfectly without the pfsense
    ).I need to replace this with softphones.



Locked