If you take a bit deep analyses on SIP packet you will be able to understand the issue,
Iptables filter on layer-3 while SIP is on layer-7. It is easily possible to generate a SIP packet with different source-ip than physical interface. You can also simulate it if you set external-ip=some-else-ip in SIP.com in asterisk. All you SIP packets will contain new some-else-ip while layer-3 headers will still have actual physical interface IP. From: [email protected] [mailto:[email protected]] On Behalf Of RSCL Mumbai Sent: Monday, August 08, 2011 5:18 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] Firewall Issue On Mon, Aug 8, 2011 at 5:09 PM, Henrik <[email protected]> wrote: Also you can set allowguest=no in sip.conf, if you didn't do it already I will check sip.conf, but logically, the packets should not be reaching Asterisk. IP Tables should have blocked them. Sans
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
