FORT FIREWALL INSTAL THE NEW FOR MAC REGISTRATION

UDP_OUT = “53,5060,10000:20000,19302:19309,19295” Allow incoming PINGīetween the readme.txt file and the csf.conf file you will be much better informed as to how csf/lfd works and protects your system both with iptables and process watching, it also has a nice audit page that will help you solidify the normal lax setup of most distros as to ephemeral tmp storage, unnecessary and insecure processes running and lax server setups. # Lists of ports in the following comma separated lists can be added using a colon (e.g. htaccess files in the /var/www/html directories and sub directories with deny directives, and added whitelisted IPs ( just in case ) This is because this is handled by the IP whitelist file “csf.allow” in which I’ve whitelisted by OpenVPN servers which I operate solely. You’ll notice there is no port 80 or 443 open in the firewall for FreePBX config GUI. You’ll see that in my outdoing UDP config.

FORT FIREWALL INSTAL THE NEW FOR MAC REGISTRATION

UDP 5060 is actually required for SIP trunk registration so don’t forget that one. I haven’t exactly figured out and narrowed down which are required and which are not for google voice trunks as it is not really clear from all the research I’ve done. Those are all google voice/hangouts related ports. So my firewall settings have to be a bit more strict. My config is a bit unique as I am building it using a VPS server in the cloud. Also it helps to whitelist all the static IPs involved in your setup if possible.

Here is my TCP section of my CSF config pasted below.

Through a lot of testing I’ve found what ports need to be open in the csf config file in order for everything to work…Įveryone tells you that you only need TCP 5060,5061 and UDP 10000-20000 open, but it’s a lot more than that depending on your deployment. I’ve actually had great success with CSF which basically helps you configure iptables.

Fort Firewall instal the new for mac