D-Link DFL-1600 User Manual page 189

18.4. H.323
Rules IP Rules
Enter the following:
Name: H323In
Action: Allow
Service: H323
Source Interface: any
Destination Interface: core
Source Network: 0.0.0.0/0 (all-nets)
Destination Network: ip-wan (external IP of the firewall)
Comment: Allow incoming calls to H.323 phone at ip-phone.
Then click OK
To place a call to the phone behind the D-Link Firewall, place a call to the
external IP address on the firewall. If multiple H.323 phones are placed
behind the firewall, one SAT rule has to be configured for each phone. This
means that multiple external addresses have to be used. However, it is
preferred to use a H.323 gatekeeper as in the "H.323 with Gatekeeper"
scenario (see 18.4.5), as this only requires one external address.
Example:
In this scenario, a H.323 gatekeeper is placed in the DMZ of the D-Link
Firewall. A rule is configured in the firewall to allow traffic between the
Add
H.323 with Gatekeeper
Figure 18.5: H.323 Scenario 3.
D-Link Firewalls User's Guide
IP Rule:
169