From owner-freebsd-questions@FreeBSD.ORG  Fri Oct 31 08:10:04 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AF5D216A4CE
	for <freebsd-questions@freebsd.org>;
	Fri, 31 Oct 2003 08:10:04 -0800 (PST)
Received: from yertle.kcilink.com (yertle.kcilink.com [216.194.193.105])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1D36B43FA3
	for <freebsd-questions@freebsd.org>;
	Fri, 31 Oct 2003 08:10:04 -0800 (PST)
	(envelope-from khera@kcilink.com)
Received: by yertle.kcilink.com (Postfix, from userid 100)
	id 8BCAC2178A; Fri, 31 Oct 2003 11:10:03 -0500 (EST)
Resent-Message-ID: <16290.35163.490884.149485@yertle.int.kciLink.com>
Resent-Date: Fri, 31 Oct 2003 11:10:03 -0500
Resent-To: freebsd-questions@freebsd.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
From: Vivek Khera <khera@kcilink.com>
To: freebsd-questions@freebsd.org
Newsgroups: ml.freebsd.questions
References: <3FA2485F.4090201@ukr.net>
X-Trace: lorax.kcilink.com 1067616256 13340 216.194.193.105 (31 Oct 2003
	16:04:16 GMT)
X-Complaints-To: daemon@kciLink.com
X-Virus-Scanned: by amavisd-new at kciLink.com
Resent-From: khera@kcilink.com (Vivek Khera)
Subject: Re: Firewall for VoIP box
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
Date: Fri, 31 Oct 2003 16:10:04 -0000
X-List-Received-Date: Fri, 31 Oct 2003 16:10:04 -0000

>>>>> "DM" == Dmitry Mishchenko <ledda@ukr.net> writes:

DM> - second card has another real IP (lets say 65.1.1.2) and connected to
DM> Quintum VoIP box.

Personally, I would *never* put my quintum on a public IP even with a
firewall in front of it....  i run mine inside a NAT'd LAN, and let
remote sites access it via the VPN, so they also have inside-the-LAN
IP numbers.


-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Vivek Khera, Ph.D.                Khera Communications, Inc.
Internet: khera@kciLink.com       Rockville, MD       +1-240-453-8497
AIM: vivekkhera Y!: vivek_khera   http://www.khera.org/~vivek/