Yeastar Firewall Rules
Overview
In sensitive environments such as government departments, banking systems, transaction centres and data centres, network administrators often configure restrictive firewall policies to defend against network attacks. Calling services still need to work normally, so the necessary target servers and ports must be allowed in the firewall.
This article lists the required servers, protocols and ports for the Linkus and IP phone client network where there is internet restriction (firewall whitelist request for the PCE service).
The IM Server uses dynamic servers and does not have designated IPs; it only provides required target ports. You only need to allow access to those TCP ports in the firewall. Ignore those ports if you do not require chat service in the Linkus app.
Required Servers and Ports
| Servers | Ports | Protocols |
|---|---|---|
| Local PC DNS server | 53 | UDP |
| Cloud Domain (WEB access) | 80, 443 | TCP |
| Cloud Domain (STUN service) | 11009 | UDP & TCP |
| Cloud Domain (For IP Phone Calling) | 5060 | UDP & TCP |
| Cloud Domain (For IP Phone Calling) | 5061 | TCP |
| SBC Server1 (RTP service) | 20000–65535 | UDP |
| SBC Server2 (RTP service) | 20000–65535 | UDP |
| IM Server (Linkus chat service) | 80, 443, 8000, 8080, 8083, 9090, 9092, 10000 | TCP |