Firewall Query

[Lusk]

I have now eventually managed to get the firewall set up but the one query I have, is why are there so many ports opened up? 9000-10999 seems an awful lot to me and surely doesn't this risk the chances of attack?

 

[Evolute IT]

I have now eventually managed to get the firewall set up but the one query I have, is why are there so many ports opened up? 9000-10999 seems an awful lot to me and surely doesn't this risk the chances of attack?

SIP requires 2 RTP ports per call, 1 for audio and 1 for control. Take the biggest license, 1024 SC and double that for the amount of ports needed to allow perfect reliability.

9000-10999 is not that much when sometimes you need to add more.

 

[cobaltit]

Not really sure what risk you are talking about. If there is a flaw in the media server then it really doesn't matter how many RTP ports are open. And if you are really worried about it you can restrict the RTP port ranges to to your SIP trunk provider forcing your remote devices to use the tunnel or VPN.