×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

Port 5060 block on MBG other than the service provider

Port 5060 block on MBG other than the service provider

Port 5060 block on MBG other than the service provider

(OP)
HI

Is it possible to block Port 5060 on the MBG other than the service provider.
MBG is on gateway mode.

Thanks

RE: Port 5060 block on MBG other than the service provider

are you saying that you want to drop all traffic other than service providers or just 5060 ?

you can use a white list to only allow external connections from their Ip on later versions of MBG

If I never did anything I'd never done before , I'd never do anything.....

RE: Port 5060 block on MBG other than the service provider

(OP)
@Billz66 Ideally i need to block 5060 everyone other than the service provider
If i use the white list, would it affect the teleworkers ?

RE: Port 5060 block on MBG other than the service provider

yep
are they mobile or can you allow their location in teh white list
ive started doing black white deny as default mbg with pub ip setting and importing country based cidr lists to limit dodgy sip sniffers from bad countries

If I never did anything I'd never done before , I'd never do anything.....

RE: Port 5060 block on MBG other than the service provider

(OP)
@Billz66

how would i set this up please.
Help files are no use. Cheers

RE: Port 5060 block on MBG other than the service provider

on MBg under system config IP blocking
from memory the MBg has to be at least version 10

if you have a text file containing the following



202.100.100.0/24
### Mitel Deployment and AMC
85.214.114.203/32
216.191.234.91/32

and set it to the white list entry
then set the rule to black /White/Deny
then all other connections would be dropped unless they came from a public ip within the allowed subnets and or addresses

NOTE: I normally allow mitel amc and deployment addresses to make sure that SYNC and Micollab deployment isnt affected

If I never did anything I'd never done before , I'd never do anything.....

RE: Port 5060 block on MBG other than the service provider

(OP)
@Billz66

Cheers for that
what is 202.100.100.0/24 not related to Mitel is it

RE: Port 5060 block on MBG other than the service provider

thats an example of a network that would be allowed to connect to the public address of the MBG

- basically add all the addresses that you want to be able to connect to the white list

you can download cidr country lists from the internet but they are not 100% accurate so you might have to adjust of you want to block by country

If I never did anything I'd never done before , I'd never do anything.....

RE: Port 5060 block on MBG other than the service provider

(OP)
[thumbsup2]

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close