benlangfeld / lumenvox-chef

Chef cookbook for Lumenvox media engine
Apache License 2.0
1 stars 3 forks source link

Firewall rules #4

Open bklang opened 10 years ago

bklang commented 10 years ago
# MRCPv1
-A INPUT -m state --state NEW -m tcp -p tcp --dport 554 -j ACCEPT

# MRCPv2
-A INPUT -m state --state NEW -m tcp -p tcp --dport 5060 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5060 -j ACCEPT

# LumenVox license server
-A INPUT -m state --state NEW -m tcp -p tcp --dport 7569 -j ACCEPT

# MRCPv2 + RTP audio ports
-A INPUT -m state --state NEW -m tcp -p tcp --dport 20000:65535 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 25000:65535 -j ACCEPT

The TCP range for MRCP is so large because it varies. The default setting is a base port of 20000 + a range that depends on the number of configured channels. The same is true for RTP, except the base is 25000.

DevStorevn commented 4 years ago

MRCPv1

-A INPUT -m state --state NEW -m tcp -p tcp --dport 554 -j ACCEPT

no, it is not 554, it is 1554