@PackMatt73 button for editing is top right corner of the post.

I have a client that will be moving to a Asterisk based PBX soon (they are testing devices now).

I want to give them roaming user functionality. A STUN server will get me past NAT issues, but provides no security. I am not familiar with a session border controller (SBC) as it has not been something I have had to deal with yet. A little searching led me to some recommended devices, but left me with questions.

Can anyone point my searches in a solid direction?

edit: bah posted in wrong section. move this please?

@Hubtech said:

so each client gets a baby VM?

Artist: http://kristinawebb.co.nz/

@Dashrender said:

Are there any security risks to publishing the SIP/RTP ports directly on the internet? it sounds like you are saying no.

Not saying that at all. In fact I said the complete opposite. Unless you like large unexplained phone bills, do not expose a PBX to the public internet with protection.

While JaredBusch is limiting what external networks are allowed to connect to his PBX, if you're a mobile user who can find themselves anywhere using a softphone for example - you can't really lock down the PBX like this, so you'd either be limited to using a VPN or publishing directly to the internet.

This is one of the reason to use a session border controller (SBC)

I'd say I should worry about this for HIPAA reasons, but we don't encrypt our current phone calls over PSTN, so I guess you're right, why worry about it over the internet? Though I'd argue that it's easier to capture the traffic over the internet than over PSTN.

Not really, it is very very low tech to find the junction box and clip on an analog voice recorder to a POTS circuit.

I will look into it @katieunitrends. As always you are awesome.

@slazer2au said:

@scottalanmiller said:

@Dashrender said:

Nice, can you share the paper?

Do you know how old I am?

Depends on which clone we are talking to.

37 based on his post in the other thread stating how old he was in 1999. That or my brain has melted down on basic math after the weekend.

@Dashrender said:

My phone vendor told me recently that VOIP traffic should always travel over a VPN when you are working remotely because SIP is not encrypted. Is this correct?

My friend showed me his old setup, he had taken an Office phone home plugged it into his home network (received DHCP address) and was connected to his office PBX without any issues. 2 questions:

1 - what are the chances the phone had a built in VPN?
2 - if no VPN - was this a wise setup?

As @scottalanmiller says, it is not required.

I run our PBX from a datacenter where we have space and the 4 people in our company all work from home and have an IP Phone. I do use good firewall rules to only allow specific networks to connect to our PBX. I do not bother with a VPN. I do want to setup a SBC but have not gone that far yet. For now I rely on a public STUN server.

Well I will give the Dell ISO a try when I redo the T410.

I think this is most of the reason...
http://en.wikipedia.org/wiki/HappinessCharge_PreCure!

Also yesterday for you is now for me (Sunday evening). Just finished dinner and the girls are enjoying an episode of Happiness Charge Pretty Cure before bath time and bed.

Good morning @Joyfano, it appears that @pol-darreljade had some issues with his browser or computer.

@pol.darreljade that is a very respected plugin, so I would suspect that was not your problem then.

@pol-darreljade then I would definitely check for something else. I would also instal this Adblock plugin for chrome (and Firefox) https://chrome.google.com/webstore/detail/adblock/gighmmpiobklfepjocnamgkkbiglidom

@pol.darreljade I would remove the plugin first. If you got a not so upright plugin, it may be feeding you ads and such.

@pol-darreljade I exclusively use chrome with the adblock plugin when on a Mac or PC. I have never had an issue.

@Bill-Kindle said:

My project for Sunday was to build a Ikea dresser for my wife. Also make beef biscuit for the first time.

Related: Mickey and Minnie Mouse chocolate chip pancakes for the girls' dinner tonight.

Saturday was reinstalling a VMWare host server as noted in my other thread.
This morning was updating the Ubiquiti EdgeRouters at a client and making new backups of the virtual machines on the newly reinstalled server from yesterday.

I have no idea on your PBX specifically, but you are likely not routing everything correctly. Either The VPN is not excluded from NAT or RTP was not routed correctly. More details of the network configuration would be needed to give a more realistic answer.

me three!

@scottalanmiller said:

@ejmillen said:

@Katie said:

@NetworkNerd said:

So am I the only radical out there who doesn't push his e-mail? Do you find that pushing e-mail to your phone makes you a slave to it in a way?

I have my phone set up to only push during the work days. On weekends, I don't wish to be a slave to email, so it's set for manual.

Yes, I would agree that pushing emails makes you a slave to it. I have also heard that there is a measurable stress level that is activated and can be bad for you long term when these notifications go off (especially in the IT world where email is the main form of communication with automated emails and CC's etc). My personal opinion however is that you have to judge your own personality type to discern whether or not this is stressful for you. Other possibilities include only turning on notifications to critical email to reduce the number of alerts received, utilizing your filter so that non critical emails do not go into your inbox for notification, or just going back to facsimile.

I'm the opposite. If you push emails to me and I don't get alerted, I know that nothing is wrong and no one needs me. If I don't push emails I live in a state of "maybe something bad has happened and I haven't heard about it yet." I find nothing more comforting than push emails so that I have the benefit of being able to truly relax knowing that I have not missed something.

I fall into this category with @scottalanmiller. If I do not wake up in the morning to 30+ emails from the various systems, then something is friggin broke. I absolutely hate waking up and not seeing all those system emails out there, because I have to then log in and find out where they are.

That said, I do have the iOS Do Not Disturb setting on automatic so that I do not get a ping or even a vibrate when an email come in after a certain time in the evening.