Siproxd is a Sip Proxy that is built into pfsense. While there are definitely many different how-tos on the net, half of them don’t seem to work. So What I’ve decided to do is to make things simple for everyone involved and write my version.
The following assumes that the pbx is out there on the internet side of the firewall and you have phones in your location behind the firewall.
I bought a used dell computer to use as my pfsense firewall and just added two ethernet cards and disabled the onboard nic (always a good idea). Works like a charm. Total Cost? $60.00 Buy them used and it will save you plenty of money. Intel Chipset Ethernet cards work best with pfsense and take the load off the CPU (not like it matters, but it helps a bit).
1. Go to Package Manager and install siproxd. This should be straight forward and should work quite well.
2. In Siproxd, configure as follows:
3. Go to your firewall Nat Settings (Firewall / NAT / Outbound) and turn on Manual Outbound Nat and specify the following rule (Just the second one in the list)
4. **VERY IMPORTANT** – Reload your firewall rules. (status / filter reload)
5. The most important part to make it all work is simply to reset the state table on your router. People will tell you to reboot the router, you can do that, but resetting the state table will have the same effect. (Diagnostic / States / Reset States)
6. After you do this, you will lose access to your pfsense box. Just log back in.
7. If your phones are configured properly, they’ll all connect to the server without issues. Configure the phones to contact and register to the server directly, not the proxy.
If this posting has helped you, please comment. It’s important to me to know that I’m not doing this in vain.
Cheers and Happy Voiping!
Update: Enclosed is a set of screenshots for PFSense 2.0, and SPA2102, I’ve included a set of screenshots to help you configure the SPA and T.38 behind the pfsense. This should help immensely.
EDIT: *** Very important on PFsense 2.0. Check your siproxd registered phones tab and make sure all of your phones / atas are registered there. Occasionally, they’ll just disappear, unfortunately, the only way to solve it is to reboot the pfsense box followed by the devices. Hopefully, the wonderful people at pfsense can fix this problem.***