From owner-freebsd-questions@FreeBSD.ORG  Fri Oct 31 03:40:23 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8B90C16A4D3
	for <freebsd-questions@freebsd.org>;
	Fri, 31 Oct 2003 03:40:23 -0800 (PST)
Received: from mail.tm.odessa.ua (Mail.TM.Odessa.UA [195.66.200.105])
	by mx1.FreeBSD.org (Postfix) with SMTP id B263343FDD
	for <freebsd-questions@freebsd.org>;
	Fri, 31 Oct 2003 03:40:19 -0800 (PST)	(envelope-from ledda@ukr.net)
Received: (qmail 14441 invoked by uid 0); 31 Oct 2003 13:33:21 +0200 (EET)
Received: from arkadia.soborka.net (HELO ukr.net) (62.16.0.39)
  by mail.tm.odessa.ua with SMTP; 31 Oct 2003 13:33:19 +0200 (EET)
Message-ID: <3FA2485F.4090201@ukr.net>
Date: Fri, 31 Oct 2003 13:32:47 +0200
From: Dmitry Mishchenko <ledda@ukr.net>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.2.1) Gecko/20030324
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Firewall for VoIP box
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 31 Oct 2003 11:40:23 -0000

Hello,

We have the following configuration: FreeBSD router with 2 network cards.
- first card has a real IP and connected to internet (lets say 
65.1.1.1). There is a  ipfw firewall which control traffic to this card.
- second card has another real IP (lets say 65.1.1.2) and connected to 
Quintum VoIP box.

VoIP box has also its own real IP (lets say 65.1.1.3).

How should firewall be configured for card #2 for allowing VoIP traffic?
What ports should be open for normal VoIP work?


Thanks,
Dmitry