Hello,

I am trying to help a friend who currently has a TP-Link TD-W9977 router.

They use a SIP phone uses port 5060.

They want to restrict traffic coming from the web on port 5060 to a few IP addresses as there have someone trying to hack there system which courses some of the phones to ring.

I have been told by TP Link support there is no way to stop any one coming in on an open Port and restrict a port to an IP address therefore I am looking at the Draytek 2762n and believe I can open port 5060 but restrict to 1 or 2 Web based IP’s please can you confirm this is the case and also if you have a knowledge base article that goes though the doing this.

What I need is to setup a rule to allow traffic for say IP address 87.56.128.40 on port 5060 be forwarded to LAN IP address 192.168.0.20 port 5060 but block anyone else trying to come in on port 5060.

Example :-
WEB ROUTER LAN
87.56.128.40:5060 Allow 192.168.0.20:5060
Any other IP Port 5060 Deny

Many thanks in advance for your help.

Sounds like fairly run-of-the-mill, firewall configuration to me

Having said that, I know VOIP is a topic all in its own right - there might be nuances and specific techniques for doing this, that I'm not aware of.

User documentation for the 2762 is here: https://www.draytek.co.uk/support/downloads/vigor-2762

Router Web Interface Demo is here: http://eu.draytek.com:22762/

Note: this is a peer-to-peer, user-support forum - not Draytek's pre-sales support.

There's a specific VOIP sub-forum here: https://forum.draytek.co.uk/viewforum.php?f=18 ... I don't know what goes on there, I've never ventured in