| reply to mazilo
Re: Asterisk Hacking Attempts...Best way to lock down? if you do the above, you are exposing your Asterisk PBX System to any crackers out there with port 5060. To avoid this, you can use ports other than 5060 (on the WAN side) and map it to an internal IP:Port on your Asterisk PBX System. This way, crackers who only scans ports 5060 will get nothing from your NAT/Firewall router.
Question.....if you change the port on the WAN side, say to 50610, and Map it to internal port 5060, then when the asterisk server responds it will respond with a source port of 5060. Will the router then translate that source back to 50610 when the packet is forwarded out the WAN side? Guess I could check the connection tracking table in the router and see for myself, but it is quicker to ask  .
Craig |
