On Jan 10, 2:00*pm, alexd <troffa...@hotmail.com> wrote:[color=blue]
> On Thu, 10 Jan 2008 01:45:33 -0800, Alister wrote:[color=green]
> > Unfortunately I cannot seem to open the ports on the BT router for more
> > than one internal IP address as this router's web interface does not
> > seem to give a direct method for opening ports.[/color]
>
> Are you trying to allow your phones outbound access? You could try
> disabling the firewall completely while you test it and see if that helps.
>[/color]

<grin> I'd love to, but this router doesn't give you that option.

[color=blue]
>
> It sounds like you're trying to use the port-forwarding mechanism, which
> isn't going to let you forward the same outside address:port to different
> inside address:ports, unless you have multiple outside addresses [in
> which case you could just give the phones outside IPs and be done with
> it].[/color]

You are quite correct, and I have investigated the router further with
the manufacturer and this is the case.
The only firewall control this router offers is port forwarding in the
manner you describe, or to assign a single
external IP (which is the same as the router's) to a DMZ which has no
firewall on it at all.

It looks like I will do this and have another router / firewall in the
DMZ with one interface as the external IP and the other
on an internal IP and then connect the phones via a switch.
I can then set up access-lists to only allow Voip traffic through the
second router. Bit of a pain though!

If you have any better suggestions I'd love to hear them!

Alister.