Configuring your firewall for remote users is essential for enabling VoIP communications through the Vodia PBX. This setup requires allowing specific TCP and UDP ports, including 5060 and 5061 for SIP signaling, UDP ports 49152 to 64512 for RTP and TCP ports 80 and 443 for web access. Additionally, setting the appropriate IP routing entries ensures both internal and remote phones can communicate effectively, utilizing a netmask that accommodates local network traffic while allowing access from external sources. This dual configuration allows for seamless call management across different network environments.
A firewall controls the incoming and outgoing network traffic based on an applied rule set and establishes a barrier between a trusted, secure LAN and/or WAN network(s) and the internet (neither secure nor trusted).
Vodia Networks recommends a LAN architecture where the voice traffic bypasses the firewall:
If a firewall feature is configured, it must allow the following ports to pass (if you want to connect remote users to the PBX then you will need to configure the Vodia SBC settings):
Allow TCP/UDP ports 5060, 5061 (for SIP)
Allow UDP ports 49152–64512(for RTP)1
Allow UDP port 123 (for NTP)
Allow TCP port 80 (for HTTP)
Allow TCP port 443 (for HTTPS)
Vodia PBX SBC
In order to make the PBX show the public IP address, you need an entry that matches "every other IP address". In other words, the netmask must be 0.0.0.0 (for example, "0.0.0.0/0.0.0.0/123.124.125.126"). The problem is it will block all calls on the private network, so there is also a necessary rule for the private network.
Example: Let's say the PBX is running on 192.168.1.2 address, the netmask is 255.255.0.0 and the internal SIP phones have 192.168.x.x addresses. So the first part of the entry will be "192.168.0.0/255.255.0.0/192.168.1.2". This part will take care of the internal phones. Now, if the phone and PBX have to talk to remote phones and servers, then you have added another part to the "IP Routing List". Consider the public IP address is 123.124.125.126 (this the IP address provided/assigned by the internet service provider). You can check the public IP using http://whatismyip.com/), then you will have "0.0.0.0/0.0.0.0/123.124.125.126" as the other part of the entry.
Putting it all together, an entry of "192.168.0.0/255.255.0.0/192.168.1.2 0.0.0.0/0.0.0.0/123.124.125.126" will make the PBX serve both internal and remote phones.
In this example, the PBX would not look at the routing presented by the operating system.
Vodia PBX strengthens security with passkeys, giving users and administrators a secure, passwordless login method that eliminates many vulnerabilities tied to traditional credentials. Passkeys use public key cryptography, storing the private key on the user’s device and the public key on the server, making them resistant to phishing and credential theft. By reducing reliance on passwords, Vodia minimizes the attack surface in cloud environments and makes authentication simpler and more secure, while ensuring a smoother, faster login experience for all users.
Many organizations rely on Microsoft as the foundation of their daily operations, but their communication systems often exist in parallel rather than in harmony. Vodia closes that gap by bringing telephony into the same environment where teams already work, turning separate systems into one connected structure. This approach removes friction between platforms, simplifies management, and gives IT teams better control and visibility over daily communication. It also creates a more seamless experience for employees, reduces operational overhead, and builds a stronger, more flexible foundation that supports growth, collaboration, and long-term scalability.
Vodia will be attending CVxExpo 2025 in Glendale, Arizona, from November 3–5. Sales Engineer Eric Altman will be on site to meet with current and prospective partners, demonstrating how Vodia’s PBX solutions can strengthen technology roadmaps for 2026. This year, Vodia highlights new integrations with ActiveCampaign, Freshdesk, HighLevel, Microsoft 365, Microsoft Presence, monday.com, and Odoo Cloud, along with enhanced call center capabilities such as agent activity dashboards, call recordings, and transcription features. Partners and attendees can schedule meetings with Eric to learn more about scalable, feature-rich, and cost-effective telecommunications solutions built for enterprises and SMBs.