Netgate SG-1000 microFirewall

Author Topic: Join.ME - SIP/NAT configuration  (Read 168 times)

0 Members and 1 Guest are viewing this topic.

Offline liver007

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Join.ME - SIP/NAT configuration
« on: December 29, 2017, 11:52:46 pm »
Hi there, My name is Jeen

New pfSense user and not especially familiar with firewall config and NAT.

I have pfSense 2.4.1-RELEASE running and all is working fine with our mix of Mac and windows machines apart from - "web-based collaboration software application for screen-sharing and online meetings".

Laptop users who want to use this can use it fine outside of our network but it wont work when they are behind the pfSense firewall. I've tried it on a couple of machines and non of them will work. They are making audio only calls apparently. support are not a lot of help in that they say do the following....

You may need to check your firewall settings.


The internet calling service uses the SIP standard to facilitate communication between the computer and the conference service. In some environments, this may require certain ports and IP ranges to be opened in your firewall.

The following port ranges should be allowed through your firewall:

5060-5100 TCP Outbound (SIP Signaling ports)
7800-32000 UDP Outbound (Voice Traffic ports)

These ports should be opened to a specific IP address range:

End Quote

After some searching of the net and this forum I have taken this to mean the following...

1. Change the outbound NAT mode to manual แทงบอลเงินสด

2. Add two outbound mappings at top of mappings list, 1 for upd and one for tcp as follows...

Interface, Source, Source Port, Destination, Destination Port, NAT Address, NAT Port, Static Port
WAN,, udp/*, JOINMEADDRESSES, udp/SIPUDPPorts, WAN address, *, Static
WAN,, tcp/*, JOINMEADDRESSES, tcp/SIPTCPPorts, WAN address, *, Static สมัครแทงบอลเงินสด

JOINMEADDRESSES is an alias with all the IP ranges specified by support (above).
SIPUDPPorts and SIPTCPPorts are the port ranges specified by support (above).

Anyway after doing that it still doesn't work.

Can anyone help/nudge me in the right direction? I feel I'm probably missing something somewhere but lost as to where to look.

Many thanks

Offline Derelict

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 10291
  • Karma: +1177/-313
    • View Profile
Re: Join.ME - SIP/NAT configuration
« Reply #1 on: December 30, 2017, 12:20:31 am »
You should not have to do anything special based on that description.

All traffic for connections from LAN outbound is passed by default.

You should probably undo everything you have done.
Las Vegas, Nevada, USA
Use this diagram to describe your issue.
The pfSense Book is now available for just $24.70!

Online KOM

  • Hero Member
  • *****
  • Posts: 5846
  • Karma: +714/-23
    • View Profile
Re: Join.ME - SIP/NAT configuration
« Reply #2 on: January 02, 2018, 10:05:34 am »
I have used and GotoMeeting with pfSense and they work as is without any special config.  I've used it with both voip phones as well as my headset.