[OpenSIPS-Users] SIP Trunking

[Darren Sessions]

Media Proxy will work with public internet addresses but, and this is  
just my understanding, was not built for use with private IPs let  
alone bridging from one subnet to another.

If your keeping the gateways on a private network is for security  
purposes, you may consider giving them public ips on the same subnet  
as your opensips and mediaproxy setup, but not specifying a default  
gateway.

Essentially, this would allow the media proxy to do its job relaying  
the audio, while still preventing 99% of any unwanted traffic to your  
gateways. Couple that will firehol or some other cool iptables app (or  
manually configure it if you like) and you'd be sitting pretty secure  
I would think.

Really depends on what you've designed (and why).

- Darren


On Aug 20, 2009, at 12:49 PM, Matthew S. Crocker wrote:

>
> I understand that OpenSIPS is not a full blown SBC (I can't afford  
> an ACMEPacket).  Will it perform the functions to proxy the SIP &  
> RTP streams (via mediaproxy) between my end users and my internal  
> gateway?
>
> At some point I plan on increasing the use of openSIPS to handle  
> registration, presence, routing, etc.
>
> -Matt
>
> ----- "Alex Balashov" <abalashov at evaristesys.com> wrote:
>
>> From: "Alex Balashov" <abalashov at evaristesys.com>
>> To: "OpenSIPS users mailling list" <users at lists.opensips.org>
>> Sent: Thursday, August 20, 2009 1:58:48 PM GMT -05:00 US/Canada  
>> Eastern
>> Subject: Re: [OpenSIPS-Users] SIP Trunking
>>
>> Matthew,
>>
>> Look for the mediaproxy module.
>>
>> That said, do be aware that a proxy is, by definition, not like an
>> SBC.
>>  SBCs have many other capabilities a proxy does not;  a proxy is a
>> relatively "thin" interoperation layer.
>>
>> Perhaps the recently introduced b2bua module is brought to bear on
>> that
>> somewhat, but classically, OpenSIPS is a proxy.
>>
>> -- Alex
>>
>> Matthew S. Crocker wrote:
>>
>>> Hello,
>>>
>>> I'm brand new to OpenSIPS, just going through the make process now.
>>
>>>
>>> I need to configure OpenSIPS to act like a SBC for some SIP trunks
>> coming off a VoIP switch.  Where should I look for
>> Documentation/Examples of a working config?
>>>
>>> Here is my scenario:
>>>
>>> OpenSIPS has two interfaces,  private & public.
>>> VoIP Gateway is on private LAN with no gateway configured (it can
>> only talk to local machines, no routing)
>>>
>>> End user has an Asterisk server on a private lan behind their
>> firewall (NAT)
>>>
>>> I need to configure OpenSIPS to listen for SIP messages on :5060
>> from the end user firewall.  It then need to rewrite the SIP message
>> and send it to the Gateway.  The Gateway would see the messages  
>> coming
>> from the internal IP of the OpenSIPS server.  Once all of the SIP
>> messages get processed I then need the OpenSIPS server to proxy the
>> RTP streams (plan on using mediaproxy) between the Asterisk server  
>> and
>> VoIP Gateway.
>>>
>>> Any helpful hints on where to look?
>>>
>>> -Matt
>>>
>>>
>>
>>
>> -- 
>> Alex Balashov - Principal
>> Evariste Systems
>> Web     : http://www.evaristesys.com/
>> Tel     : (+1) (678) 954-0670
>> Direct  : (+1) (678) 954-0671
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
> -- 
> Matthew S. Crocker
> President
> Crocker Communications, Inc.
> PO BOX 710
> Greenfield, MA 01302-0710
> http://www.crocker.com
> P: 413-746-2760
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users