Canadian TV, Computing and Home Theatre Forums banner

41 - 48 of 48 Posts

·
Registered
Joined
·
877 Posts
Not at all. I apologize if it sounded that way.

I don't agree with his recommendation of port forwarding, unless things won't work any other way. SIP scanners are extremely prevalent - operated by hackers looking for unsecured VoIP equipment they can use for personal gain or criminal activity. If your VoIP equipment rejects such calls you may never know you're getting scanned. The attacker however does know your equipment is there, and will keep attempting to crack it for an indeterminate amount of time. If on the other hand your equipment is behind a "restricted cone NAT" router with no port forwarding or DMZ, there will be no indication that your VoIP hardware even exists. I would never say that something is completely "unhackable", but that would be as close to unhackable as you could get.

If a user's router is such that port forwarding is absolutely necessary, then a high SIP port (X_UserAgentPort if you use an OBi ATA) between 20000 and 65535 should be used. Most SIP scanners scan around port 5060. While using a high SIP port does not make you invulnerable to the scanners, it makes it less likely they will find you.

If you do remove your port forwarding, the primary issue to watch for is that you're still able to receive incoming calls. Whether or not the SIP port is forwarded will not affect, for example, audio quality.
 

·
Registered
Joined
·
267 Posts
I have SIP port on line 1 set at 5060 and line 2 set at 5061. If I turn off virtual server for port 5060 on the router, I can not call in.
On ATA I have Restrict Source IP turned on for both lines. From the documentation: "Restrict Source IP : Permit/prohibit the SPA device from accepting SIP packets from anywhere other than the registered SIP proxy."
From the above statement is the device restricted to only the voip service provider?
Also in the ATA device I have EXT SIP Port field. From the documentation:
"EXT SIP Port : If you want or know the specific UDP port you want the SPA to advertise as the public address port, then fill in the value in this field."
I think this is equivalent to your X_UserAgentPort. So in this field should I put in any number between 20000 and 65535?
As for the router I think it's time to look for a new one. Any suggestions for a reliable budget router?
 

·
Registered
Joined
·
877 Posts
I am not clear on what EXT SIP Port is for, and the administration guide unhelpfully describes it as "The external SIP port number". I have never needed to use this configuration option.

In any case, you can change the SIP port from its current 5060/5061 to a random number between 20000 and 65535. Since your router requires the virtual server to be set up, you would need to update this with the new port number you choose.

If you do decide to get a new router, I recommend anything you can install Tomato firmware on. Tomato is an excellent firmware that performs particularly well with VoIP. I've been using Asus hardware (specifically the RT-N16) for several years now and am pleased with it - but there are many brands that are compatible.
 

·
Registered
Joined
·
3,211 Posts
Anyone here setup an Obi 200 with voip.ms? I have already ported by home phone number from Bell, but now I can't get this setup. The Obi is plugged into my router. I tried the instructions above, the ones at voip.ms. Now when I dial out, I get an error saying my call is rejected due to error 603. And if I try to do an inbound call, I just get a busy signal. Anyone have an easy walkthrough for the Obi and voip.ms?

EDIT1: Dialing out works. But dialing in just gives a busy signal. Baby steps..... Any advice?
 

·
Registered
Joined
·
8,592 Posts
Some of Obi's ATA products are very similar to Linksys ATAs so following the Linksys setup (discussed near the beginning of this thread) or searching for similar issues on Linksys ATAs may provide a solution.
 

·
Registered
Joined
·
3,211 Posts
I first explained the issue to Obi, and they said to check with voip.ms. Voip.ms told me to check the server I was using. Kinda weird, but I could seem to get the Obi to stick with the same server setup with voip.ms. Anyway, after a bunch of retries, it stuck, and I am up and running. Blocked ONE telemarketer number....a 647 number....and already no more calls at night. Woohoo!
 
41 - 48 of 48 Posts
Top