VoIP.infoThe independent guide to business communications.
VoIP.info Guide

Firewall rules for VoIP

Define management, signaling and media access separately using actual deployment requirements.

Reviewed 2026-10-19Foundational

Start with traffic roles

The administration interface is not the SIP listener, and the SIP listener is not the RTP media range. Build an inventory of each required service, its source, destination, protocol and purpose. A generic instruction to open VoIP ports is too imprecise for a secure deployment.

Separate administration, signaling and media
An administration network accesses management interfaces. Allowed signaling peers and media peers use separate defined policies to reach the PBX. Arbitrary internet traffic is not a management path.

Example defensive architecture. Source restrictions, authentication, update policy and call permissions work together.

Use the actual configuration

Read the PBX's configured listeners and media range and the carrier's documented signaling and media networks. Defaults in another tutorial may not match your installation. Remote phones can have a different access design from a fixed-address carrier.

Diagnose with observations

Review relevant allow/deny counters and a bounded packet trace around one failed call. Confirm whether traffic reaches the boundary and whether the return path is valid. A lack of replies can also involve routing, DNS or a service that is not listening.

Keep management restricted

Do not expose administrative services just because phones need to register. Apply the smallest justified change and test the intended call flow. Remove temporary diagnostic rules afterward and retain the reason for each permanent rule in the operating record.

Verify negotiated UDPTL addresses before changing rules

The T38Fax diagnostic compares the re-INVITE SDP, NAT state, provider and customer port ranges, ALG behavior and packets in both directions.

Use current VoIPstudio destinations and the built-in test together

VoIPstudio’s current network guide separates signaling and media destinations, while the desktop client exposes a per-port WebRTC Test. The client diagnostic records the live documentation, test result and actual call flow rather than turning a static address list into permanent policy.

Constrain VoIP Much network changes to observed flows

VoIP Much documents server-port and source-blocking behavior, but not a universal customer RTP rule in the reviewed pages. The provider profile keeps local source ports, provider destination, registration responses, SDP and media flows distinct.

Use the selected VoIPline interconnect boundary

VoIPline supports public-internet and ordered private-IP delivery. The provider profile avoids inventing one universal customer firewall or RTP policy.

Use Webex Health Checker as bounded evidence

Cisco states that Health Checker cloud results show cloud status rather than the client connection to the cloud. The Webex App diagnostic pairs it with the assigned service and observed call.

Allow for Twilio edge movement without calling the path proven

Twilio advises allowing all published origination signaling and media ranges because traffic may move between edges. Pair firewall evidence with the Twilio diagnostic.

Correlate Plivo URI reachability with the observed packet source

Pair current Plivo address ranges, destination URI, firewall decision and packet arrival with the Plivo inbound diagnostic.

Correlate the selected Vonage URI with packet arrival

Pair URI destination, transport, current service-address evidence, firewall decision and observed packet source with the Vonage inbound diagnostic.

Keep Voxtelesys registration ACL and Customer IP distinct

A registration ACL controls which sources may register; a Customer IP is an inbound route destination. The Voxtelesys diagnostic checks each control without broadening both.

Scope Amazon Chime firewall evidence to the selected Region and IP family

Use the current AWS signaling and media ranges, actual connector Region, IPv4 or dual-stack behavior and DNS TTL. The diagnostic avoids broadening unrelated paths.

Anveo Direct signaling addresses are not an RTP inventory

Anveo Direct says media is sent directly by the underlying carrier. The diagnostic derives bounded signaling and media rules from current SDP and observed packets.

Do not diagnose CarrierX routing from firewall state alone

The CarrierX diagnostic pairs provider attempt and response with customer-edge packets, PBX handling, SDP and observed media.

Use current AVOXI data-center evidence

Pair the selected AVOXI data center and provider attempt with customer-edge packets before changing rules. The diagnostic keeps signaling, PBX handling and media distinct.

Correlate Easybell address or FQDN with packets

Pair the effective Easybell inbound target with customer-edge evidence before changing rules. The diagnostic keeps DNS, transport, PBX and media distinct.

Pair SIP.US portal state with packets

Retain identity mode, current gateway, DID assignment and the provider attempt, then pair them with bounded edge evidence. The diagnostic separates firewall, PBX and media results.

Flowroute Direct Media is not limited to signaling proxy ranges

The current provider page says RTP can arrive from any source IP to the PBX public media range. Use the focused diagnostic to scope destination ports and confirm observed traffic.

Pair Bulk Solutions provider attempts with the customer edge

The Bulk Solutions diagnostic separates current signaling sources, destination reachability, listener, PBX match and negotiated media ports.

Compare Yay.com published ranges with the actual call boundary

The Yay.com diagnostic joins dated source guidance, destination resolution, edge receipt, signaling response and negotiated media.

Simwood address lists are service- and date-scoped

The Simwood guide distinguishes the current Partner and Direct page from the older Asterisk 16 sample and requires current Hosted policy.

Sinch address ranges are regional and date-scoped

The Sinch guide treats the current SIP and RTP tables as change-controlled inputs rather than permanent copied facts.

Treat dialplan HTTP as explicit egress

The Asterisk CURL guide requires an approved destination and bounded outbound policy while keeping DNS, connect, TLS, HTTP and body evidence separate.

Scope SIPTRUNK gateway rules and direct-media policy separately

The SIPTRUNK guide preserves signaling allowlists while treating varied RTP sources as a local security-design decision.

Prove where Blink registration traffic stops

The Blink registration diagnostic separates host policy, network policy, registrar silence and an explicit SIP response.

Sources & applicability

Primary references for the technical details above. Operational examples and planning checklists are VoIP.info editorial guidance.

Continue your research

Hub

VoIP networking

Trace signaling and audio through your actual topology before changing ports or prioritization.

Explore topic →
Troubleshooting · Asterisk 22 LTS · FreePBX 17 / Debian 12 checks

One-way VoIP audio

Trace the missing direction from advertised media address to receiving endpoint.

Read guide →
Interactive tool

VoIP bandwidth calculator

Estimate IP-layer voice traffic per direction from codec rate, packet duration and concurrent calls.

Open tool →
Guide · Protocol concepts; firewall and endpoint controls vary by release

Firewall state and asymmetric VoIP routing

Separate a permitted rule from the state and return path needed to keep a call working.

Read guide →
Troubleshooting · T38Fax testing, firewall, SIP ALG, packet-capture, ECM and fax-only service pages reviewed October 13, 2026; the exact trunk, endpoint, intermediary, authentication, registration, SIP dialog, re-INVITE owner, SDP, NAT, firewall, ALG, UDPTL packets, fax speed, resolution, ECM result, duration and received document remain deployment specific, and no account, endpoint, PBX, SBC, firewall, packet, call, fax session or document was inspected or tested

T38Fax call connects but T.38 is not negotiated

Trace one fax from the initial SIP dialog and G.711 phase through the T.38 re-INVITE, SDP answer, UDPTL path, ECM state and received-document result.

Read guide →
Client research · Current VoIPstudio download, Desktop Softphone, user-introduction, endpoint-administration and network-troubleshooting documentation reviewed October 16, 2026; the public download surface lists Windows, Windows MSI, macOS Intel, macOS Silicon and Linux paths but does not publish one common desktop build number, and no package, workstation, operating-system permission, user account, endpoint record, VPN, firewall, WebRTC test, SIP Test, MTR result, packet, protected session, media stream or live call was inspected or tested

VoIPstudio Desktop Softphone: account, audio and network evidence

Evaluate the service-specific Windows, macOS and Linux desktop client without treating an online icon, selected device or WebRTC test as proof of a completed two-way call.

Read guide →
Troubleshooting · Current VoIPstudio download, Desktop Softphone, user-introduction, endpoint-administration and network-troubleshooting documentation reviewed October 16, 2026; the public download surface lists Windows, Windows MSI, macOS Intel, macOS Silicon and Linux paths but does not publish one common desktop build number, and no package, workstation, operating-system permission, user account, endpoint record, VPN, firewall, WebRTC test, SIP Test, MTR result, packet, protected session, media stream or live call was inspected or tested

VoIPstudio Desktop is online but the call or audio fails

Separate application login, endpoint registration, call signaling, selected devices, WebRTC reachability and two-way media before changing credentials or network policy.

Read guide →
Provider research · Current VoIP Much SIP-trunk product, 3CX, FreePBX, UniFi Talk, IP-blocking, SIP ALG, codec, quality, status and service-agreement pages reviewed October 16, 2026. Registration-based account examples, account-issued server and credentials, paid channel scope, supported codec lists, SIP-server port guidance and several network cautions are documented; selected-account DNS, transport and proxy profile, number inventory, caller identity, routing, failover, RTP range, DTMF, fax, emergency service, messaging, encryption, capacity, price, SLA, availability and compatibility remain account, route, contract or observation specific. No account, order, credential, trunk, number, registration, packet, media stream, status incident, emergency call or live call was inspected or tested

VoIP Much SIP trunks: registration, channels and acceptance evidence

Qualify a VoIP Much trunk against the account-issued server and credentials, paid channel scope, number routes, signaling, media, network controls and contract rather than a generic PBX template.

Read guide →
Troubleshooting · Current VoIP Much SIP-trunk product, 3CX, FreePBX, UniFi Talk, IP-blocking, SIP ALG, codec, quality, status and service-agreement pages reviewed October 16, 2026. Registration-based account examples, account-issued server and credentials, paid channel scope, supported codec lists, SIP-server port guidance and several network cautions are documented; selected-account DNS, transport and proxy profile, number inventory, caller identity, routing, failover, RTP range, DTMF, fax, emergency service, messaging, encryption, capacity, price, SLA, availability and compatibility remain account, route, contract or observation specific. No account, order, credential, trunk, number, registration, packet, media stream, status incident, emergency call or live call was inspected or tested

VoIP Much trunk registers but calls or audio fail

Separate registration, source-address policy, number and route selection, channel scope, signaling, SDP and both media directions before changing credentials or firewall rules.

Read guide →
Provider research · Current VoIPline Telecom Australian SIP-trunk product, pricing, legal index, Voice and SMS (IP) service schedule, SIP-trunk critical-information summary, network, number-porting and service-status material reviewed October 16, 2026. Registration, SIP URI diversion and Microsoft Teams gateway are documented as distinct operation modes; the service schedule documents public-internet and private-IP delivery, ordered concurrent-call channels, default bidirectional service and selected codec boundaries. The selected order, registrar values, number inventory, caller identity, routing, DTMF, fax, messaging, emergency service, signaling and media protection, failover, price, SLA, availability and compatibility remain order, location, contract or observation specific. No account, order, credential, trunk, number, registration, port, packet, media stream, emergency call or live call was inspected or tested

VoIPline Telecom SIP trunks: modes, channels and call evidence

Qualify one Australian VoIPline SIP trunk by its ordered operation mode, interconnect, channels, numbers, caller identity, negotiated media, contractual boundary and observed calls.

Read guide →
Troubleshooting · Current VoIPline Telecom Australian SIP-trunk product, pricing, legal index, Voice and SMS (IP) service schedule, SIP-trunk critical-information summary, network, number-porting and service-status material reviewed October 16, 2026. Registration, SIP URI diversion and Microsoft Teams gateway are documented as distinct operation modes; the service schedule documents public-internet and private-IP delivery, ordered concurrent-call channels, default bidirectional service and selected codec boundaries. The selected order, registrar values, number inventory, caller identity, routing, DTMF, fax, messaging, emergency service, signaling and media protection, failover, price, SLA, availability and compatibility remain order, location, contract or observation specific. No account, order, credential, trunk, number, registration, port, packet, media stream, emergency call or live call was inspected or tested

VoIPline trunk registers but calls or audio fail

Separate operation mode, interconnect, number and caller-identity routing, channel scope, SIP response, SDP and both media directions before changing credentials or firewall rules.

Read guide →
Client research · Current Cisco Webex App calling-option, assigned-service, system-requirement, download, audio-setting, Health Checker, local Diagnostics, Calling-error and Control Hub troubleshooting documentation reviewed October 16, 2026. Call on Webex, Unified CM, Webex Calling and Calling hosted by a Service Provider remain distinct calling services with different feature and evidence boundaries. Platform, client build, entitlement, dial plan, emergency behavior, signaling and media protection, availability and compatibility remain deployment or observation specific. No organization, account, client, phone service, device, network, packet, media stream, administrator view or call was inspected or tested

Webex App calling: service modes, clients and evidence

Qualify Webex App as an assigned calling client by service, platform, entitlement, identity, device path, diagnostic evidence and observed call rather than by its shared interface alone.

Read guide →
Troubleshooting · Current Cisco Webex App calling-option, assigned-service, system-requirement, download, audio-setting, Health Checker, local Diagnostics, Calling-error and Control Hub troubleshooting documentation reviewed October 16, 2026. Call on Webex, Unified CM, Webex Calling and Calling hosted by a Service Provider remain distinct calling services with different feature and evidence boundaries. Platform, client build, entitlement, dial plan, emergency behavior, signaling and media protection, availability and compatibility remain deployment or observation specific. No organization, account, client, phone service, device, network, packet, media stream, administrator view or call was inspected or tested

Webex App phone service connects but calls or audio fail

Find the first divergence among assigned calling service, entitlement, registration, address or number, call control, selected devices and both media directions.

Read guide →
Troubleshooting · Current first-party Twilio Elastic SIP Trunking configuration, OriginationUrl, failover, IP-address, troubleshooting and Trunk-resource documentation reviewed October 17, 2026. Number association, Trunk SID, enabled Origination URLs, priority, weight, edge selection, provider attempt, SIP result, disaster-recovery webhook, TwiML result, PBX handling and media remain separate evidence. The OriginationUrl page currently contains conflicting default-value presentation, so effective values must be read explicitly. No Twilio account, number, trunk, OriginationUrl, disaster-recovery application, PBX, SBC, DNS answer, firewall, packet, media stream or live call was inspected or tested

Twilio origination URI, failover or disaster recovery is wrong

Trace one inbound call through number association, enabled Origination URLs, priority and weight, edge selection, SIP results, disaster recovery, PBX handling and media.

Read guide →
Troubleshooting · Current first-party Plivo Zentrunk quickstart, technical-specification, account-limit, hangup-code and debug-log documentation reviewed October 18, 2026. Number assignment, inbound trunk, primary and fallback URI, URI authentication, DNS result, provider attempt, SIP response, hangup source and cause, PBX handling, answer and each media direction remain separate evidence. Plivo documents fallback when the primary URI is unresponsive, not as a universal retry after every SIP final response. No Plivo account, trunk, number, URI, credential, PBX, DNS answer, firewall, packet, media stream or live call was inspected or tested

Plivo inbound primary or fallback URI is wrong

Trace one inbound call through number assignment, trunk and URI state, primary reachability, fallback eligibility, SIP results, PBX routing and media.

Read guide →
Troubleshooting · Current first-party Vonage SIP technical, dashboard, Asterisk, FreePBX and Voice Logs documentation reviewed October 18, 2026. Number ownership, number-to-trunk link, trunk type, inbound region, SIP URI, priority, timeout, DNS result, provider attempt, transport, PBX identification, route, answer and each media direction remain separate evidence. Priority orders eligible URIs; the reviewed pages do not publish one universal SIP-response advancement matrix. No Vonage account, number, trunk, URI, credential, PBX, DNS answer, firewall, packet, media stream or live call was inspected or tested

Vonage inbound SIP URI priority or timeout is wrong

Trace one inbound call through number linking, trunk and region, ordered SIP URIs, timeout, transport, PBX identification, routing and media.

Read guide →
Troubleshooting · Current first-party Voxtelesys portal, registrar, routing, security, call-record, emergency and service documentation reviewed October 18, 2026. DID ownership, route-profile assignment, destination priority, registered-PBX Contact, Customer IP, transfer leg, provider attempt, PBX handling, media and caller outcome remain separate evidence. The reviewed pages do not publish one complete SIP-response advancement matrix, timeout contract, retry count, restoration timer or established-call survival promise for every route. No Voxtelesys account, DID, route profile, registration, ACL, IP address, transfer, PBX, call record, packet, media stream, emergency workflow or live call was inspected or tested

Voxtelesys DID route profile or failover is wrong

Trace one inbound call through DID assignment, route profile, destination priority, registration or IP state, provider attempt, PBX match, transfer and media.

Read guide →
Troubleshooting · Current first-party AWS Voice Connector, group, origination, encryption, quota, number, emergency, network and pricing documentation reviewed October 18, 2026. Phone-number assignment, Voice Connector group priority, selected connector, origination-route priority and weight, AWS attempt, customer-edge receipt, PBX handling, media and caller outcome remain separate evidence. AWS documents provider-side routing controls but the reviewed pages do not establish one universal SIP-response advancement matrix, timeout schedule, restoration timer or established-call survival promise. No AWS account, Service Quotas view, phone number, Voice Connector, group, route, CloudWatch log, PBX, packet, media stream, emergency workflow or live call was inspected or tested

Amazon Chime Voice Connector group or origination route is wrong

Trace one inbound call through number assignment, group priority, connector selection, origination route, AWS evidence, customer edge, PBX and media.

Read guide →
Troubleshooting · Current first-party Anveo Direct FAQ, inbound DID, outbound termination, network and services pages reviewed October 18, 2026. The pages distinguish source-IP-authenticated outbound service, inbound delivery to a SIP URI, optional backup SIP URI, Anveo signaling sources and media sent directly by an underlying carrier. SIP REGISTER is not supported. The reviewed pages do not publish one universal failover trigger, SIP-response matrix, timeout, retry count, restoration interval, RTP source inventory, port range or active-call survival promise. No Anveo Direct account, DID, add-on, trunk, authorized address, SIP URI, PBX, firewall, packet, carrier media path, bill or live call was inspected or tested

Anveo Direct signaling works but audio or SIP-URI failover fails

Trace the DID destination, provider signaling, primary and backup URI attempts, direct carrier RTP and PBX handling without treating REGISTER as a health signal.

Read guide →
Troubleshooting · Current first-party CarrierX trunk-group, trunk, SIP-trunk, call and phone-number documentation reviewed October 18, 2026. The pages distinguish DID assignment, trunk-group routing type, per-trunk priority and weight, soft and hard SIP failure handling, SIP OPTIONS monitoring, endpoint authorization, capacity and codecs. Documented defaults are configuration references, not observed account values. The reviewed pages do not establish SIP REGISTER as the inbound binding, one universal failover result for every response, access-path diversity, established-call survival or an account-wide calls-per-second limit. No CarrierX account, API response, DID, endpoint, trunk group, trunk, ACL, credential, token, PBX, packet, media stream, rate, emergency workflow or live call was inspected or tested

CarrierX trunk-group failover or round-robin selects the wrong trunk

Trace DID assignment, routing type, priority or weight, hard and soft failures, SIP OPTIONS state, endpoint delivery and PBX handling for one CarrierX call.

Read guide →
Troubleshooting · Current first-party AVOXI outbound-trunk, inbound SIP-URI, diagnostic and network documentation reviewed October 18, 2026. The pages distinguish outbound authentication from inbound forwarding, named SIP URIs from number routing targets, terminal response codes from other failures, on-demand test calls from customer calls, and signaling from media. Public examples and defaults are documentation evidence, not observed tenant values. No AVOXI account, number, routing rule, SIP URI, trunk, credential, PBX, firewall, packet, media stream, invoice or live call was inspected or tested

AVOXI inbound SIP URI target or terminal response is wrong

Trace one AVOXI number through its enabled routing rule, named SIP URI, terminal-code policy, provider attempt, PBX response and media.

Read guide →
Troubleshooting · Current first-party Easybell registration, Trusted IP, trusted-FQDN and automatic-fallback documentation reviewed October 18, 2026. The pages distinguish inbound and outbound authentication, registration from IP-only delivery, sequential trusted-IP attempts from offline forwarding, DNS acceptance from later DNS answers, and provider selection from PBX handling. Public examples and defaults are documentation evidence, not observed tenant values. No Easybell account, connection, number block, credential, address, FQDN, DNS answer, PBX, firewall, packet, media stream, invoice or live call was inspected or tested

Easybell trunk registers but Trusted IP or FQDN inbound calls miss the PBX

Trace one inbound call through Easybell’s directional authentication mode, stored address or FQDN, provider attempt, PBX match, offline forwarding and media.

Read guide →
Troubleshooting · Current first-party SIP.US identity, registration, gateway, DID routing, failover, channel-capacity and E911 documentation reviewed October 18, 2026. The pages distinguish digest registration from IP authentication, provider-gateway redundancy from secondary-trunk routing, unconditional PSTN Forward from conditional PSTN Backup, and signaling selection from PBX and media evidence. Public examples and portal descriptions are documentation evidence, not observed tenant state. No SIP.US account, trunk, DID, credential, registration, address, portal setting, balance, DNS answer, PBX, firewall, packet, media stream, emergency workflow, invoice or live call was inspected or tested

SIP.US DID bypasses the PBX or PSTN Backup does not engage

Trace one inbound call through DID ownership, Forward and Backup precedence, identity mode, trunk assignment, channel use, PBX handling and media.

Read guide →
Troubleshooting · Current first-party Flowroute and BCM One documentation reviewed October 18, 2026. The current support pages were updated August 27, 2026 and list the Oregon and Virginia PoPs, require all listed signaling ranges for provider-side failover and load balancing, and describe Direct Media as RTP from potentially any source IP to the customer system public media-port range. Older but still public first-party route documentation distinguishes route objects from each number's primary and failover relationships, registration from Host or URI delivery, and preferred inbound PoP selection from customer-destination failover. Documentation and examples are not observed tenant state. No Flowroute account, credential, number, route, registration, DNS answer, certificate, PBX, firewall, packet, media stream, invoice, emergency workflow or live call was inspected or tested

Flowroute call signaling works but audio is missing

Separate SIP completion from Direct Media by preserving SDP, public media ports, translated addresses, observed RTP sources, packet direction and decoded audio.

Read guide →
Troubleshooting · Current first-party Bulk Solutions IP-authentication, registration, inbound, outbound, direction-split integration and emergency documentation reviewed October 18, 2026. The current material separates portal host or trunk-group ownership, DID assignment, source-IP authorization, digest credentials, optional registration requirements, provider service-hostname use, request identity, PBX matching and call media. The public FreePBX PDF identifies FreePBX 14.0.4.5 and chan_sip and is retained only as legacy field-orientation context, not a FreePBX 17 PJSIP template. Provider examples are documentation evidence rather than observed account state. No Bulk Solutions account, host, trunk group, DID, credential, registration, DNS answer, address, PBX, firewall, packet, media stream, emergency workflow, price, invoice or live call was inspected or tested

Bulk Solutions outbound works but the inbound DID misses the PBX

Trace DID assignment, inbound trunk group, provider destination, signaling source, Request-URI, PJSIP identification, FreePBX route and media without changing outbound identity.

Read guide →
Troubleshooting · Current first-party Yay.com SIP-trunk creation, authentication, number assignment, inbound destination, encryption, firewall and FreePBX-example documentation reviewed October 18, 2026. The material separates number-to-trunk assignment, inbound identity selection, IP address or FQDN destination, port and transport, outbound IP or username/password authorization, optional registration, TLS signaling, dashboard and endpoint SRTP settings, PBX routing and media. The public FreePBX example uses legacy chan_sip-style fields and is retained only as historical field-orientation context, not a FreePBX 17 PJSIP template. Provider examples are documentation evidence rather than observed account state. No Yay.com account, number, trunk, credential, address, FQDN, DNS answer, registration, certificate, PBX, firewall, packet, media stream, price, availability, compatibility, capacity or live call was inspected or tested

Yay.com trunk connects but inbound routing or audio fails

Trace number assignment, inbound identity, destination, TLS, PBX matching, SDP and SRTP without changing a working outbound authorization path.

Read guide →
Troubleshooting · Current first-party Simwood Hosted SIP Trunks, interop, trunk overview, Asterisk 16 sample, hosted TLS/SRTP, Partner and Direct whitelisting and portal material were reviewed October 19, 2026. The batch keeps Hosted, Partner, Direct, Wholesale and Carrier Services scopes separate; outbound digest authorization separate from inbound registration; Contact user separate from the called-number value in To; configured routes separate from observed delivery; and the version-scoped Asterisk 16 example separate from current FreePBX or Asterisk configuration. No Simwood account, trunk, credential, number, registration, PBX, FreePBX route, DNS answer, firewall, packet, media stream, failover event, price, availability, compatibility, capacity or live call was inspected or tested

Simwood outbound works but inbound registration or routing fails

Trace a Hosted trunk from registration and Contact-user addressing through the provider attempt, PJSIP identification, context and called-number route without treating outbound digest success as inbound proof.

Read guide →
Troubleshooting · Current first-party Sinch Voice API SIP Trunking, callback, authentication, call-header, CDR and release-note material and retained Elastic and BYOC product-scope pages were reviewed October 19, 2026. The batch keeps the Voice API static SIP trunk path separate from Elastic and BYOC products and from Callback API control; termination toward Sinch separate from origination toward the customer; each flow's application configuration separate; regional FQDNs separate from their current address ranges; SIP signaling separate from RTP; and configured TLS or SRTP separate from observed negotiation. No Sinch account, application, key, secret, number, trunk, callback endpoint, DNS answer, certificate, PBX, firewall, packet, CDR, media stream, price, availability, compatibility, capacity or live call was inspected or tested

Sinch termination works but origination or audio fails

Trace separate Voice API applications, regional FQDNs, forwarding or callback control, customer-edge receipt, PBX routing, TLS, SDP and media without treating one working direction as proof of the other.

Read guide →
Guide · Current Asterisk Latest API CURL, CURLOPT, JSON_DECODE and URIENCODE references, the Asterisk CLI guide, the upstream func_curl implementation and the official libcurl connection and whole-transfer timeout references were reviewed October 19, 2026. The generated Asterisk API pages reported branch 23; the installed Asterisk and libcurl versions, loaded modules, channel and global options, DNS, proxy, certificate store, remote service, response schema and elapsed call-path behavior remain deployment specific. No PBX, module, dialplan, credential, DNS answer, proxy, certificate, remote service, response, packet, media stream or live call was inspected or tested

Asterisk CURL: make HTTP dialplan lookups bounded and auditable

Separate URL construction, channel-scoped options, connection and whole-transfer limits, HTTP handling, response parsing and fallback routing for remote dialplan lookups.

Read guide →
Troubleshooting · Current Asterisk Latest API CURL, CURLOPT, JSON_DECODE and URIENCODE references, the Asterisk CLI guide, the upstream func_curl implementation and the official libcurl connection and whole-transfer timeout references were reviewed October 19, 2026. The generated Asterisk API pages reported branch 23; the installed Asterisk and libcurl versions, loaded modules, channel and global options, DNS, proxy, certificate store, remote service, response schema and elapsed call-path behavior remain deployment specific. No PBX, module, dialplan, credential, DNS answer, proxy, certificate, remote service, response, packet, media stream or live call was inspected or tested

Asterisk CURL is empty, slow, redirected or returns an unsafe response

Trace one remote dialplan lookup through URL ownership, effective options, DNS and connect timing, TLS and HTTP handling, bounded response parsing and the fallback branch.

Read guide →
Provider research · Current first-party SIPTRUNK device, registration, inbound-call, IP-authentication, failover, registration-status, interconnection and direct-media documentation was reviewed October 19, 2026. Credential registration and static-IP authentication remain different service paths; portal registration, Contact address, observed public source, inbound route, signaling gateways, direct-media RTP sources and failover treatments remain separate evidence. No SIPTRUNK account, trunk, credential, registration, number, route, gateway, DNS answer, PBX, firewall, packet, media stream, failover event, price, availability, compatibility or live call was inspected or tested

SIPTRUNK registration, inbound Contact routing and direct-media evidence

Keep credential registration or IP authentication, Contact delivery, inbound number matching, gateway redundancy, direct-media RTP and failover treatment independently observable.

Read guide →
Troubleshooting · Current first-party SIPTRUNK device, registration, inbound-call, IP-authentication, failover, registration-status, interconnection and direct-media documentation was reviewed October 19, 2026. Credential registration and static-IP authentication remain different service paths; portal registration, Contact address, observed public source, inbound route, signaling gateways, direct-media RTP sources and failover treatments remain separate evidence. No SIPTRUNK account, trunk, credential, registration, number, route, gateway, DNS answer, PBX, firewall, packet, media stream, failover event, price, availability, compatibility or live call was inspected or tested

SIPTRUNK is registered but inbound calls or audio fail

Trace the selected authentication mode, registered Contact, provider attempt, PBX route and direct-media RTP without treating portal registration as end-to-end proof.

Read guide →
Client research · Current Blink Windows/Linux manual pages for SIP accounts, the main interface, incoming-call alerts and audio calls, the platform-specific changelog, and RFC 3261 response and proxy-processing rules reviewed October 14, 2026; the documentation describes Blink sending 603 for Reject, 486 for Busy, and no SIP response when Escape only silences the local alert, but it does not prove the selected package, account, registrar, proxy, forked branches, PBX response handling, voicemail policy, forwarding policy or observed call result, and no package, workstation, account, credential, SIP trace, PBX, provider, branch, forwarding rule, voicemail destination, alert action or live call was inspected or tested; registration timeout, explicit service-unavailable and retry evidence refreshed October 19, 2026

Blink softphone: platform tracks, SIP accounts and negotiated protection

Evaluate AG Projects' separate Windows, Linux, Blink Pro for Mac and Mac beta artifacts, local SIP account ownership and negotiated protection.

Read guide →
Troubleshooting · Current first-party Blink product, account, troubleshooting, download and platform-changelog pages plus RFC 3261, RFC 3263 and RFC 5626 were reviewed October 19, 2026. Product track, operating system, package, SIP account, DNS answers, proxy override, transport, network policy, server response, retry timing and call behavior remain deployment specific. No package, workstation, account, credential, DNS answer, proxy, registrar, firewall, NAT device, SIP trace, packet, media stream or live call was inspected or tested

Blink registration shows 408 timeout, 503 unavailable or stays gray

Trace Blink account identity, DNS or manual proxy selection, transport, network reachability, SIP response and retry timing before changing codecs or security settings.

Read guide →