nmap结果findSIP的开放端口

我怀疑在路由器tleilaxdoge上的防火墙或其他安全措施会对SIP呼叫造成问题。 我如何确定连接被允许而不被阻塞?

我只想从192.168.1.3192.168.1.4进行SIP呼叫; 或者甚至不打电话。 环? 嘟? 平安? 某种“hello world”连接。

 192.168.1.1 netgear router 192.168.1.2 asterisk (vicidial) 192.168.1.3 ubuntu client 192.168.1.4 mac OSX client (not shown) 

我是否有防火墙问题会影响build立连接的软电话?

 thufir@doge:~$ thufir@doge:~$ nmap 192.168.1.1 Starting Nmap 6.46 ( http://nmap.org ) at 2015-02-18 06:10 PST Nmap scan report for 192.168.1.1 Host is up (0.0086s latency). Not shown: 994 closed ports PORT STATE SERVICE 23/tcp open telnet 53/tcp open domain 80/tcp open http 3333/tcp open dec-notes 5555/tcp open freeciv 49152/tcp open unknown Nmap done: 1 IP address (1 host up) scanned in 0.14 seconds thufir@doge:~$ thufir@doge:~$ nmap 192.168.1.2 Starting Nmap 6.46 ( http://nmap.org ) at 2015-02-18 06:10 PST Nmap scan report for 192.168.1.2 Host is up (0.00027s latency). Not shown: 997 filtered ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https Nmap done: 1 IP address (1 host up) scanned in 4.95 seconds thufir@doge:~$ thufir@doge:~$ thufir@doge:~$ ssh [email protected] Password: Last login: Mon Feb 16 00:43:01 2015 from 192.168.1.2 Thank you for installing ViciBox Server v.6.0! This software is available for free download at http://www.vicibox.com. If you paid for this software you have been ripped off. Please report any fraud or abuses of this software to [email protected]. Please report any bugs on the forum at http://www.vicidial.org To configure the LAN settings type: yast lan To change the server IP in the database type: /usr/share/astguiclient/ADMIN_update_server_ip.pl Official paid-for ViciDial support is available at http://www.vicidial.com Free community-based ViciDial Support is available at http://www.vicidial.org/VICIDIALforum - ViciBox Redux v.6.0.3-141118 Could not chdir to home directory /home/thufir: No such file or directory thufir@tleilax:/> thufir@tleilax:/> nmap 192.168.1.3 Starting Nmap 6.40 ( http://nmap.org ) at 2015-02-18 09:14 EST Nmap scan report for 192.168.1.3 Host is up (0.00075s latency). Not shown: 998 closed ports PORT STATE SERVICE 22/tcp open ssh 2000/tcp open cisco-sccp Nmap done: 1 IP address (1 host up) scanned in 0.15 seconds thufir@tleilax:/> thufir@tleilax:/> 

也可以看看:

http://thread.gmane.org/gmane.comp.voip.sflphone/1948

与InfoSec相比,这确实是一个networking故障排除问题。 nmap是扫描端口的一个很好的工具,但是因为你可以访问每个端点,所以我会使用netcat来解决这个问题。

根据维基百科 ,SIP在5060/5061(UDP或TCP)上侦听。 要validation哪些端口正在侦听,可以使用SIP服务器上的其中一个工具:

  • lsof -P -n -iTCP -sTCP:侦听,build立
  • netstat -ant
  • tcpview (tcpvcon)

一旦确定了正在监听的内容,可以使用Netcat来validation防火墙是否阻止连接/端口。

  1. 停止SIP服务器,所以端口没有监听和免费使用
  2. 运行: netcat -l [-u] 506 [0-1]
  3. 从客户端: netcat SIP_Server_IP_FQDN [-u] 506 [0-1]
  4. 在端点上键入一些随机文本,如果它出现在另一个端点上,则stream量不会被阻止。

-u是UDP,默认是TCP

用图像回复您的评论:您在客户端input的内容显示在另一个客户端上: 在这里输入图像说明