A Voice over Internet Protocol (VoIP) proxy server is described. The VoIP proxy server is placed in a DMZ of a company's secure internal communication network. The VoIP proxy server receives VoIP control messages and VoIP media streams and based on the MAC address and source IP address contained in the control message, pushes a policy change to the internal network's external firewall to open call control protocol ports and Real Time Protocol (RTP) ports only for packets from the source IP address. The VoIP proxy server manages the hiding of the company's internal network address and directs incoming VoIP packets to an IP-PBX connected to the company's internal network.