Firewall Checker - some ports open, most closed

[redhamilton]

Sonicwall NSA 4500 - with required "disable source port remap" hotfix
One to One NAT
different External/Internal FQDN

No idea what is going on.

NAT and Firewall access rules setup correctly. All VoIP functionality in firewall disabled.

Going Line by line in firewall checker...

Port 5060 open
Port 5090 closed
Port 9000-9005 open
Port 9006-9255 closed

All of the above ports are open at teh firewall..

This makes no sense.

Any insights?

 

[complex1]

Hi,

Please disable the Windows Firewall and test again.

 

[redhamilton]

Ah yes, I knew I was forgetting to post something obvious.

Yes, I've already made sure windows firewall is off....did that before even starting this.

 

[craigreilly]

Do you have an outbound SNAT? I found that helped in my prior Sonic Wall setups.

 

[redhamilton]

Do you have an outbound SNAT?

I do not.

 

[complex1]

Hi,

I do not use the Sonicwall NSA 4500, but when reading the “how to config” of the SonicWALL I am wondering why you don’t use the “Many-to-One NAT” config.
I think this is a better setup. Don’t ask me why.
http://www.3cx.com/blog/voip-howto/soni ... iguration/

 

[redhamilton]

“Many-to-One NAT” config.

Well, I used a One-to-one simply because I could. I have a few available Public IP's, so why not dedicate one. I'll try a many to one, since thats the scenario 3cx uses to describe setup with a sonicwall. If that doesn't work I think I'll try putting it in a DMZ.

 

[redhamilton]

Just reporting back in. Figured the issue out.
Thanks for the help.

-Josh