UCoIP DNS/firewall configuration - Revision history

Hrocha at 17:16, 26 March 2026

2026-03-26T17:16:20Z

Hrocha: /* Firewall/Router configuration */

2024-12-27T17:10:18Z

‎Firewall/Router configuration

Hrocha: /* Firewall/Router configuration */

2019-01-24T10:43:06Z

‎Firewall/Router configuration

Hrocha: /* Firewall/Router configuration */

2019-01-24T10:42:54Z

‎Firewall/Router configuration

Hrocha: /* Firewall/Router configuration */

2019-01-24T10:42:31Z

‎Firewall/Router configuration

Hrocha: /* Firewall/Router configuration */

2019-01-24T10:41:56Z

‎Firewall/Router configuration

Hrocha: /* Firewall/Router configuration */

2019-01-24T10:39:52Z

‎Firewall/Router configuration

Ipbwikiadmin: /* Firewall/Router configuration */

2018-12-04T16:46:06Z

‎Firewall/Router configuration

Ipbwikiadmin: /* Firewall/Router configuration */

2018-11-12T16:05:55Z

‎Firewall/Router configuration

Ipbwikiadmin: /* Firewall/Router configuration */

2018-11-12T16:02:25Z

‎Firewall/Router configuration

@@ Line 19: / Line 19: @@
 srv001.domain.com.            IN A     85.86.87.88
 voip.domain.com.              IN A     85.86.87.88
 cafe.domain.com.              IN A     85.86.87.88
 ucoip.domain.com.             IN A     85.86.87.88
 iportaldoc.domain.com.        IN A     85.86.87.88
 </pre>
@@ Line 30: / Line 28: @@
 <pre>
 contacts.domain.com.           IN CNAME   srv001.domain.com.
 light.domain.com. 	       IN CNAME   srv001.domain.com.
-webphone.domain.com.           IN CNAME   srv001.domain.com.
+ipbrickmail.domain.com.	       IN CNAME   srv001.domain.com.
-groupware.domain.com.	       IN CNAME   srv001.domain.com.
-webmail.domain.com. 	       IN CNAME   srv001.domain.com.
 webrtcproxy.domain.com.        IN CNAME   srv001.domain.com.
 autoconfig.domain.com.         IN CNAME   srv001.domain.com.
 autodiscover.domain.com.       IN CNAME   srv001.domain.com.
@@ Line 69: / Line 65: @@
 </pre>
@@ Line 102: / Line 93: @@
 HTTPS          - 443 TCP
 SMTP           - 25 TCP
 SIP            - 5060 UDP/TCP
 SIPS           - 5061 TCP
@@ Line 109: / Line 102: @@
 RTP            - 60000:65000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth1 or other interface rather than eth0
 as gateway - rtpproxy utilization)
 </pre>
@@ Line 149: / Line 139: @@
-NOTE: With update04_6.1, it's crucial too to have a Wildcard SSL Certificate. More information here:
+NOTE: It's crucial too to have a Wildcard SSL Certificate. More information here:
-−
-[http://eshop.ipbrick.com/eshop/software_info.php?cPath=7_74_16&products_id=907&language=en Update04 security guide]
 [https://wiki.ipbrick.com/index.php/How_to_buy_and_configure_a_SSL_certificate_at_IPBrick_6.1 How to buy and configure a SSL certificate at IPBrick]

@@ Line 112: / Line 112: @@
 XMPP-server    - 5269 TCP
 XMPPS          - 5223 TCP
 </pre>
-It's mandatory ensure that IPBrick can access the local addresses, so coud be necessary configure the DNS hosts.
+It's mandatory ensure that IPBrick can access the local addresses, so could be necessary configure the DNS hosts.
 If IPBrick public interface '''is behind a NAT''' and:
@@ Line 140: / Line 137: @@
 On IPBrick interface ("DNS -> Name Resolution -> Local names resolution") add the following entries:
 <pre>
-   - cafe.<domain>       ->   Internal IP
+  - cafe.<domain>          ->   Internal IP
-   - contacts.<domain>   ->   Internal IP
+  - contacts.<domain>      ->   Internal IP
-   - groupware.<domain>  ->   Internal IP
+  - groupware.<domain>     ->   Internal IP
-   - im.<domain>         ->   Internal IP
+  - im.<domain>            ->   Internal IP
-   - iportaldoc.<domain> ->   Internal IP
+  - iportaldoc.<domain>    ->   Internal IP
-   - ucoip.<domain>      ->   Internal IP
+  - ucoip.<domain>         ->   Internal IP
-   - voip.<domain>       ->   Internal IP
+  - voip.<domain>          ->   Internal IP
-   - webrtc.<domain>     ->   Internal IP
+  - webrtcproxy.<domain>   ->   Internal IP
 </pre>

@@ Line 107: / Line 107: @@
 RTP            - 50000:55000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth0 as gateway)
 RTP            - 55000:60000 UDP  (CAFE Phone webRTC2SIP)
-RTP            - 60000:65000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth1 or other interface rather than eth0 as gateway - rtpproxy utilization)
+RTP            - 60000:65000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth1 or other interface rather than eth0
 XMPP-client    - 5222 TCP
 XMPP-server    - 5269 TCP

@@ Line 107: / Line 107: @@
 RTP            - 50000:55000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth0 as gateway)
 RTP            - 55000:60000 UDP  (CAFE Phone webRTC2SIP)
-RTP            - 60000:65000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth1 or other interface
+RTP            - 60000:65000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth1 or other interface rather than eth0 as gateway - rtpproxy utilization)
- rather then eth0 as gateway - rtpproxy utilization)
 XMPP-client    - 5222 TCP
 XMPP-server    - 5269 TCP

@@ Line 107: / Line 107: @@
 RTP            - 50000:55000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth0 as gateway)
 RTP            - 55000:60000 UDP  (CAFE Phone webRTC2SIP)
-RTP            - 60000:65000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth1 or other interface rather then eth0 as gateway - rtpproxy utilization)
+RTP            - 60000:65000 UDP  (RTP Audio - when the IP PBX is connected to the Internet using eth1 or other interface
 XMPP-client    - 5222 TCP
 XMPP-server    - 5269 TCP

← Older revision		Revision as of 16:46, 4 December 2018
Line 131:		Line 131:


−	Then, ~~orders~~ made from IPBRICK to any of their addresses are always going to be routed to the public IP.	+	Then, requests made from IPBRICK to any of their addresses are always going to be routed to the public IP.

	As these orders leave and re-enter, they are blocked, so you need configure the IPBrick DNS hosts to '''resolve the local addresses to the internal IP'''.		As these orders leave and re-enter, they are blocked, so you need configure the IPBrick DNS hosts to '''resolve the local addresses to the internal IP'''.

← Older revision		Revision as of 16:05, 12 November 2018
Line 131:		Line 131:


−	Then, orders made from IPBRICK to any of their addresses are always going to be routed to the public IP. As these orders ~~come out~~ and re-enter, they are blocked, so you need configure the DNS hosts to '''resolve the local addresses to the internal IP'''.	+	Then, orders made from IPBRICK to any of their addresses are always going to be routed to the public IP.
		+
		+	As these orders leave and re-enter, they are blocked, so you need configure the IPBrick DNS hosts to '''resolve the local addresses to the internal IP'''.

@@ Line 122: / Line 122: @@
 ''- IPBrick have 2 network interfaces (ETH0 and ETH1) configured with private IPs''
-''- The communication between IPBrick and the router is done by eth1
+''- The communication between IPBrick and the router is done by ETH1
 ''- Public IP is on the router