Firewall issues

[olaf]

I had an issue yesterday when my PAPT2 failed to reregister after I rebooted my router. I submitted a ticket, the response was prompt, and they enabled a STUN server and set NAT keep-alive packets to be sent every 5 minutes to help prevent the problem from happening again. They also recommended that I disable the SPI firewall on my router because it may cause intermittent problems, even if it seems to be working.

I rebooted the router again today, and when the PAPT2 again failed to register (with the SPI firewall still on), I experimented a bit with putting the PAPT2 in a DMZ vs. turning off the firewall completely. As far as I could tell, the DMZ did not let it reregister, but shutting the firewall off did.

I'm not crazy about leaving the firewall off, but I suppose I could use an iptables-based firewall instead of the SPI firewall (I am using DD-WRT firmware). I'm just wondering if others out there have thoughts & experience on the pros & cons of an SPI firewall and other router security measures while using VOIP.

Thanks.

[fisamo]

Which version of DD-WRT are you running?

[olaf]

Which version of DD-WRT are you running?

v24-sp2 standard, build 12188 (05/21/09).

[Xponder1]

Firmware: DD-WRT v24-sp2 (01/01/09) micro
I use this version with no problems at all. It was one of the most recommended builds.

[olaf]

Firmware: DD-WRT v24-sp2 (01/01/09) micro
I use this version with no problems at all. It was one of the most recommended builds.

And you leave the SPI firewall on?

I've had no trouble with the router for anything else, just an intermittent registration issue in the last couple days while the firewall is on.

[ptrowski]

I have a similar configuration and leave the SPI firewall off. It has not created extra issues with my other laptops, PC's etc from a security aspect.

[voipinit]

Curious - correctly setting up a DMZ should bypass your router firewall altogether.

[Xponder1]

And you leave the SPI firewall on?

I've had no trouble with the router for anything else, just an intermittent registration issue in the last couple days while the firewall is on.

Yes I leave it on.

[scott2020]

Firmware: DD-WRT v24-sp2 (01/01/09) micro
I use this version with no problems at all. It was one of the most recommended builds.

I think the newest release was to address an exploit that would give hackers full control of the router. I saw a news release about it yesterday.

[fisamo]

I think the newest release was to address an exploit that would give hackers full control of the router. I saw a news release about it yesterday.

That's comforting...

I asked the OP about version, because I have SPI on with no issues whatsoever. One key difference, though, is that as a former beta tester, I'm able (and choosing) to connect with my own equipment (PBX-in-a-Flash), not a Voipo-supplied ATA. My DD-wrt version is shown below:

Router Model         Asus WL-520GU/GC
Firmware Version     DD-WRT v24-sp2 (06/09/09) mini-usb - build 12268M NEWD Eko

I don't know as if the hardware would make a difference, but what brand and model router are you running?