Editing Introduction to a Self Managed Life: a 13 hour & 28 minute presentation by FUTO software (section)

=== Introduction to Network Rules ===

We set up two sets of rules:

# '''SIP Trunk rules''' (Ports 5060-5065)
#* Allows Unitel to talk to our PBX
#* Deals with signaling &amp; connection management
# '''Media Proxy Rules''' (Ports 10000-20000)
#* Manages the actual audio transmission
#* Handles voice data going back and forth

<span id="what-are-nat-port-forwards-vs-firewall-rules"></span>
==== What are NAT port forwards vs Firewall Rules? ====

<span id="network-address-translation-nat-port-forwards"></span>
===== Network Address Translation (NAT) Port Forwards =====

NAT is like the restaurant host who brings guests to specific tables. It allows specific machines behind your network to get traffic depending on the port that the traffic was trying to access when the traffic got to your cable modem &amp; firewall.

<span id="firewall-rules-1"></span>
===== Firewall Rules =====

The firewall acts as a bouncer. Even when NAT directs traffic to the right computer, the firewall can still block problematic connections.

<span id="order"></span>
===== Order: =====

<code>pfSense</code> will add a firewall rule AUTOMATICALLY each time you create a NAT port forward, as long as you do not change that option at the end of the NAT port forward rule creation page. I circled this to make sure you would get it right.

# Set up NAT rules first
# Configure firewall rules second

<span id="our-setup"></span>
===== Our Setup =====

FreePBX box IP address: 192.168.5.6

Internet Traffic → NAT (Traffic Direction) → Firewall (Security Check) → FreePBX virtual machine

<span id="when-things-dont-work-common-scenario"></span>