Just put the phones outside the firewall.