Hi thanks for the reply.
Yes that is the correct ports for Voice (and query and FTP)
I think I managed to find a workaround to get it work.
I’m not sure why, but for some reason I have to set destination in firewall rule to any.
Setting it to the host itself doesn’t work.
This setting is not working.
But changing ddd-app-01 to any solved it.
(it’s not the biggest problem, since this firewall is only local, but would be preferable to be able to route a port to a single machine instead of any)
Not sure why though.
On the additional notes:
Default ports makes it easier but see your point.
You never run as root. (almost)
Restrict access on a teamspeak server?
That would be really hard and high maintenance.
Enabling all location people are connecting from is near to impossible.