Sign up
 Vonage  

       
 
Vonage Forum Menu

Vonage Forums
Vonage VoIP Forum
tplink Posted:
Im trying to add
my HT802 vonage
adapter to my home
network. I
currently have
...

In The Forum:
Hard Wiring - Installation
Topic:
Vonage behind switch
On Dec 05, 2016 at 06:35:11

DWSupport Posted:
After recent
Vonage update that
took place on the
4th and 5th of
Nov. E-mails with
...

In The Forum:
Vonage
Topic:
Voicemail Not Forwarding to Outlook Accounts
On Nov 10, 2016 at 12:23:26

peterlee Posted:
Had a call from a
Hospital in Ajax,
Ontario to my home
in
Scarborough, Onta
rio
...

In The Forum:
Vonage Canada
Topic:
Hospital Incoming call unable to connect
On Nov 08, 2016 at 11:59:50

TELLDOUG Posted:
I am looking for a
product that will
make my phone ring
louder so I can
hear using
...

In The Forum:
Vonage
Topic:
Looking for a ringer ameliorate
On Oct 26, 2016 at 09:21:30

HildBeft Posted:
You can recollect
password by
connecting the
router to your pc
and open the
browser
...

In The Forum:
Hard Wiring - Installation
Topic:
How to arrive at wifi password?
On Oct 20, 2016 at 05:05:49

HildBeft Posted:
Great tips..
Thanks for sharing
...

In The Forum:
Hard Wiring - Installation
Topic:
How to have Vonage and another land line?
On Oct 20, 2016 at 04:55:03

massrman Posted:
The devices are
available at
different price
margins , please
share your
estimated
...

In The Forum:
Vonage
Topic:
IP PBX for small business
On Sep 30, 2016 at 00:48:03

massrman Posted:
Hi these are most
commonly used SIP
PBX interops and
their
configuration
guides,
...

In The Forum:
Vonage
Topic:
IP PBX for small business
On Sep 30, 2016 at 00:37:45

Sammy00 Posted:
Has anyone setup a
W52p phone for
vonage? I have
a W52p with two
wireless handsets,
...

In The Forum:
Hard Wiring - Installation
Topic:
W52p Setup
On Aug 30, 2016 at 10:38:01

James44 Posted:
Hi, I am
looking for a good
Sip Trunking
provider in
Canada. they
should offer
...

In The Forum:
Vonage
Topic:
A good sip trunking provider
On Jul 17, 2016 at 23:42:46


Vonage VoIP Forums

Vonage In The News
Vonage Holdings Corp. Reports Fourth Quarter and Full Year 2013 Results

Carolyn Katz Elected to Board of Directors of Vonage Holdings Corp.

Syndication

Vonage Customer Reviews
Vonage vs. Time Warner Cable SoCal
Vonage vs. Time Warner Cable SoCal



Vonage UK Review
Vonage UK Review



Vonage Pros and Cons for 2006
Vonage Pros and Cons for 2006



Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review
Vonage, a VT2142 and a RTP300, My Experiences - A Detailed Review



Salt Lake City: impressions after several months
Salt Lake City: impressions after several months




Vonage Reviews


Post new topic   Reply to topic  Vonage® VoIP Forum - Vonage News, Reviews And Discussion » Vonage Forum Archive
Author Message
nickguy
New Forum Member
New Forum Member


Joined: Jun 04, 2005
Posts: 6

PostPosted: Sat Jun 04, 2005 8:14 pm    Post subject: Allowed VONAGE ports through firewall... Reply with quote Back to top

Long story short... My Vonage stopped working for some calls not others.... Noticed that when I removed an access list that allowed,
as Vonage requests, UDP port ranges 5061 5062 10000 - 20000
tftp, dns, and ntp... that I could call out to the one long distance number that I need to use on a regular basis. Email support requests not responded to and phone tech support was not helpful as the tech had a limited bag of tools. Today I pulled the Motorola out of my network stuck it in a DMZ and then allowed all udp while logging...

When I dial the number I need to get too I see the below log output..
traffic from a Vonage IP accessing port 20324.. My math puts that outside of the range of ports Vonage says to allow. So, enquiring minds want know.... What is the port list ?

Jun 5 05:53:07.804: %SEC-6-IPACCESSLOGP: list OUTSIDE_ACL permitted udp 64.192.151.152(20324) - (my ip)

whois -h whois.arin.net 64.192.151.152
Williams Communications, Incorporated WCG-BLK-5 (NET-64-192-0-0-1)
64.192.0.0 - 64.193.255.255
Vonage HOLDING CORP WLCO-TWC02142426-VONAGE-NYC (NET-64-192-151-0-1)
64.192.151.0 - 64.192.151.255

# ARIN WHOIS database, last updated 2005-06-04 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
nguy@pegasus(nguy)$
View user's profile Send private message
fatboyntn
Full Forum Member
Full Forum Member


Joined: Jan 28, 2005
Posts: 49

PostPosted: Sun Jun 05, 2005 2:31 am    Post subject: Reply with quote Back to top

Why not simply allow all outbound ports and protocols for the IP of your TA?

What is your concern causing you to filter outbound traffic from your TA?
View user's profile Send private message
nickguy
New Forum Member
New Forum Member


Joined: Jun 04, 2005
Posts: 6

PostPosted: Mon Jun 06, 2005 10:19 am    Post subject: ports Reply with quote Back to top

Actually the name of the ACL is a misnomer... It is applied on inbound traffic. I am only filtering inbound traffic.
View user's profile Send private message
scubasteve
Vonage Forum Associate
Vonage Forum Associate


Joined: May 25, 2005
Posts: 21

PostPosted: Mon Jun 06, 2005 12:38 pm    Post subject: Reply with quote Back to top

interesting... I wonder if this could be the cause of my problem (http://www.vonage-forum.com/ftopic6161.html) where I can call some people but not others.

I scanned my firewall logs for the times Vonage shows I made calls but was unable to find anything. Of course with all the background noise on Comcast that's not really surprising.

I'll try logging all my udp traffic tonight and see if I notice out of range traffic as well.
View user's profile Send private message
NHTracker
Vonage Forum Senior
Vonage Forum Senior


Joined: Mar 23, 2005
Posts: 134

PostPosted: Mon Jun 06, 2005 12:54 pm    Post subject: Reply with quote Back to top

Is your router UPNP capable? It seems as though the TA is telling the Vonage server to connect to that port for some reason. Most routers automatically allow an incoming connection on any port as long as the TA makes the request. In your case it doesn't sound like your router will do that.
View user's profile Send private message
nickguy
New Forum Member
New Forum Member


Joined: Jun 04, 2005
Posts: 6

PostPosted: Mon Jun 06, 2005 12:55 pm    Post subject: ports Reply with quote Back to top

Let me know. how it goes. At this stage I will leave the TA in the "DMZ" with all udp allowed which seems to be fine.
View user's profile Send private message
nickguy
New Forum Member
New Forum Member


Joined: Jun 04, 2005
Posts: 6

PostPosted: Mon Jun 06, 2005 1:49 pm    Post subject: Reply with quote Back to top

It is a Cisco 1750. My understanding of UPnP when it comes to routers is that the device automatically configures a static nat entry.
(ip and port) for people who do not know how to do that. So it is not really like a "permit tcp established rule" where you allow requests back in that were initiated by a host using tcp.

So that being said I think you are probably right and that is fine but
it essentially punches holes I cannot find documentation from Vonage that says "allow udp ports 5060 5061, 53, 123, 69, 53 10000-20000 oh and any other ports that the TA
happens to feel like using". It would be a lot simpler to say... You need to allow all udp traffic inbound to the device and it needs to be in a DMZ or have a firewall that is not really that great of a firewall.
View user's profile Send private message
scubasteve
Vonage Forum Associate
Vonage Forum Associate


Joined: May 25, 2005
Posts: 21

PostPosted: Mon Jun 06, 2005 7:02 pm    Post subject: Reply with quote Back to top

just spent a bunch of time screwing around with my firewall/natd configuration and fixed the issue I was having. Here's what I found:

First, there seems to be a lot of port unreachable icmp msgs that I was denying. Allowing this alone didn't fix it, but there's probably something in the ata to respond to these by switching a port.

Second, on the calls that weren't working, apparently my nat was oblivious to all outbound udp traffic. No idea what caused this on some calls and not others - probably some sort of failure at call initialization. the firewall then logged denied packets on sip ports as destined for my external ip and not the nat'd internal ip.

So I solved it by redirecting all UDP traffic from the interweb to my ata in my natd.conf (redirect_proto). I then allowed all Voip ports (udp) to my external ip. In a 45min phone conversation I just had w/ my parents, ipfw recorded 54 packets matching this rule (allow udp from any to me dst-port 10000-20000 in via xl1 keep-state). quite strange....

i wish i had a clearer understanding of why it was failing, but i'll settle for it working :p
View user's profile Send private message
nickguy
New Forum Member
New Forum Member


Joined: Jun 04, 2005
Posts: 6

PostPosted: Mon Jun 06, 2005 9:38 pm    Post subject: Reply with quote Back to top

Agreed, it would seem that the best way to get these things to work is to hang the on a public IP with all traffic allowed Smile
View user's profile Send private message
quixadhal
New Forum Member
New Forum Member


Joined: Mar 08, 2005
Posts: 5

PostPosted: Tue Jun 07, 2005 10:45 am    Post subject: Security is silly Reply with quote Back to top

nickguy wrote:
Agreed, it would seem that the best way to get these things to work is to hang the on a public IP with all traffic allowed Smile


Yep, that's the philosophy that my former company had... if they couldn't figure it out, put it out there in front of that pesky firewall. I suppose if you like the idea of your hardware being hackable by anyone who happens to keep up with the various firmware vulnerability lists, that's fine. I kindof like to make it at least slightly challenging for them.

Personally, I'd like to ask the programmers to whom I've graciously handed more than 10000 ports, why they need to use additional ports outside of what they already asked for?

Considering that my single PAP2 adapter can have at most 2 lines active at a time, I can't imagine why they would need so many ports, UDP or not.
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


All times are GMT - 5 Hours

Vonage Service Plans


Vonage VoIP Members
Members List Members
New oliviagw11
New Today 7
Yesterday 10
Total 99033

Who Is On Site
Visitors 114
Members 0
Total 114


Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums

Vonage Stock Price
Value: 6.79
Change:   N/A
Up to 15 Minute Delay

Site Search
 






†AK and HI residents pay $29.95 shipping. ††Limited time offer. Valid for residents of the United States (&DC), 18 years or older, who open new accounts. Offer good while supplies last and only on new account activations. One kit per account/household. Offer cannot be combined with any other discounts, promotions or plans and is not applicable to past purchases. Good while supplies last. Allow up to 2 weeks for shipping. Other restrictions may apply.

1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.

2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.

HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments, all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See www.vonage.com/911 for details.

** Certain call types excluded.

www.vonage-forum.com is not an official Vonage support website & is independently operated.
All logos and trademarks are property of their respective owners. All comments are property of their posters.
All other www.vonage-forum.com content is © Copyright 2002 - 2013 by 4Sight Media LLC.

Thinking of signing up for Vonage but have questions?
Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074
No Vonage Promotion Code or Coupon Codes are required at www.vonage.com to receive any special,
best Vonage cheap deals, free sign up offers or discounts.

[ | | | | | ]

Vonage Forum Site Maps

Vonage | VoIP Forum | How VoIP Works | Wiring and Installation Page Two | International Rate Plans 2 | Internet Phone
Promotion | Vonage Review | VoIP | Broadband Phone | Free Month | Rebate | Vonnage | Vontage | VoIP | Phone Service
Phone | llamadas ilimitadas a Mexico | Latest News | VoIP Acronyms | Deal | Philippines Globe Phone | Site Maps

The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal.
If you are considering signing up for Vonage and have found our Vonage News, Customer Reviews, Forums
& all other parts of this site useful, please use our Vonage Sign up page.


Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 0.72 Seconds and 488 Pages In The Last 60 Seconds
The Vonage VoIP Forum