Re: [asterisk-users] Failed to authenticate device message
Hi Jerry
Le 22/07/2020 à 14:54, Jerry Geis a écrit :
I am getting this message:
Failed to authenticate device ;tag=149853321 for
INVITE, code = -1
but it does not report the "connecting" address. Who is failing
connecting ?
I either need to block someone or fix something - I'm thinking block -
but I dont know who.
How do I found out the connecting IP?
Jerry
You should get it with recvip
exten = i,1,Verbose(Incoming ANONYMOUS SIP call from ${CALLERID(name)}
${CALLERID(num)} SRC IP ${CHANNEL(recvip)})
--
Daniel
--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
Check out the new Asterisk community forum at: https://community.asterisk.org/
New to Asterisk? Start here:
https://wiki.asterisk.org/wiki/display/AST/Getting+Started
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Failed to authenticate device message
You didn’t post the Asterisk version, but if this is an OLD asterisk version then the source IP may be missing from messages/logs. If you have low traffic in general then using something like Wireshark may help you examine any suspicious SIP packet on the PBX. For higher volumes it’s like drinking from a fire hydrant, so not suitable. If this is a small PBX, have a look at the SecAst product (https://teium.io/secast). It’s free for small installations. It’s an Asterisk security product that monitors network traffic at a the adapter level so it can sniff the source. It also talks to Asterisk through the AMI so it can get more details of the connection/session that way. If this is for a larger PBX then you would have to move the discussion to the biz list for more info on SecAst. (Or email me off list) From: asterisk-users [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Jerry Geis Sent: Wednesday, July 22, 2020 11:37 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] Failed to authenticate device message >Did you check your security log? >There is usually a wealth of info there about who, what, where when and why I also checked /var/log/asterisk/messages and it just has the same line. Nothing additional. Jerry -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Failed to authenticate device message
>Did you check your security log? >There is usually a wealth of info there about who, what, where when and why I also checked /var/log/asterisk/messages and it just has the same line. Nothing additional. Jerry -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Failed to authenticate device message
Did you check your security log?
There is usually a wealth of info there about who, what, where when and why.
Andrew
On Wed, 22 Jul 2020 at 11:22 pm, Jerry Geis wrote:
> >exten = i,1,Verbose(Incoming ANONYMOUS SIP call from ${CALLERID(name)}
> >${CALLERID(num)} SRC IP ${CHANNEL(recvip)})
>
>
> Thanks - its not an incoming call - its just a log on the CLI
> There is nothing before it and nothing after - no incoming call.
>
> Jerry
> --
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
> https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>http://lists.digium.com/mailman/listinfo/asterisk-users
--
--
*Andrew Yager, CEO* *(BCompSc, JNCIS-SP, MACS (Snr) CP)*
*business nbn™ advisor (advisor 01783150)*
Real World Technology Solutions - IT People you can trust
Voice | Data | IT Procurement | Managed IT
rwts.com.au | 1300 798 718
*Real World is a DellEMC Gold Partner*
This document should be read only by those persons to whom it is addressed
and its content is not intended for use by any other persons. If you have
received this message in error, please notify us immediately. Please also
destroy and delete the message from your computer. Any unauthorised form of
reproduction of this message is strictly prohibited. We are not liable for
the proper and complete transmission of the information contained in this
communication, nor for any delay in its receipt. Please consider the
environment before printing this e-mail.
--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
Check out the new Asterisk community forum at: https://community.asterisk.org/
New to Asterisk? Start here:
https://wiki.asterisk.org/wiki/display/AST/Getting+Started
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] Failed to authenticate device message
>exten = i,1,Verbose(Incoming ANONYMOUS SIP call from ${CALLERID(name)}
>${CALLERID(num)} SRC IP ${CHANNEL(recvip)})
Thanks - its not an incoming call - its just a log on the CLI
There is nothing before it and nothing after - no incoming call.
Jerry
--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
Check out the new Asterisk community forum at: https://community.asterisk.org/
New to Asterisk? Start here:
https://wiki.asterisk.org/wiki/display/AST/Getting+Started
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
[asterisk-users] Failed to authenticate device message
I am getting this message: Failed to authenticate device ;tag=149853321 for INVITE, code = -1 but it does not report the "connecting" address. Who is failing connecting ? I either need to block someone or fix something - I'm thinking block - but I dont know who. How do I found out the connecting IP? Jerry -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
