Router firewall security settings

[htcom]

I've got a couple of questions regarding firewall security.

The Quadro is behind an adsl Nat router (Draytek 2820) with UDP ports 5060 and 6000 to 6099 opened (tcp port 80 is also opened). The phones are attached to the Wan port of the Quadro.
At the moment the only remote extension is my support phone (I might run this over vpn in future).

Two questions:
1. The firewall on the Quadro is currently disabled. Is there any benefit in also enabling it ?

2. The firewall on the adsl router is currently set to allow any ip address access through the opened ports. Is it sensible practice to just restrict the ip address to that of the ITSP (and my static public ip) ?

Is there anything else that's worth locking down.

Thanks
Htcom

[KSComs]

Turn the firewall on the Quadro, restrict the SIP access from the internet side to the ITSP. Do the same on your draytek.

Dont leave it open :eek: - or you will end up with calls being generated on your quadro that you didnt want perhaps ...

[htcom]

Thanks yet again Kev.