Bruce B
2011-Jul-22 23:32 UTC
[asterisk-users] Securing Asterisk - How to avoid sending, "SIP/2.0 603 Declined"
Hello, I am wondering if there is a way to drop SIP packets for generic transactions? For example, only SIP PEERs are allowed to call in and receive ACK or Declined rather that those inviting a call who are not PEERs at all. Currently my Asterisk setup sends, "*SIP/2.0 603 Declined" *to any stranger invites because my dialplan includes Hangup(). Is there any way I can not send a 603 declined so to mislead the probe runner? Thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110722/953b5dec/attachment.htm>
Alex Balashov
2011-Jul-22 23:39 UTC
[asterisk-users] Securing Asterisk - How to avoid sending, "SIP/2.0 603 Declined"
On 07/22/2011 07:32 PM, Bruce B wrote:> Hello, > > I am wondering if there is a way to drop SIP packets for generic > transactions? For example, only SIP PEERs are allowed to call in and > receive ACK or Declined rather that those inviting a call who are not > PEERs at all. > > Currently my Asterisk setup sends, "*SIP/2.0 603 Declined" *to any > stranger invites because my dialplan includes Hangup(). Is there any > way I can not send a 603 declined so to mislead the probe runner?There is really no way to accomplish that except with a firewall. -- Alex Balashov - Principal Evariste Systems LLC 260 Peachtree Street NW Suite 2200 Atlanta, GA 30303 Tel: +1-678-954-0670 Fax: +1-404-961-1892 Web: http://www.evaristesys.com/
Paul Belanger
2011-Jul-23 01:48 UTC
[asterisk-users] Securing Asterisk - How to avoid sending, "SIP/2.0 603 Declined"
On 11-07-22 07:32 PM, Bruce B wrote:> Hello, > > I am wondering if there is a way to drop SIP packets for generic > transactions? For example, only SIP PEERs are allowed to call in and receive > ACK or Declined rather that those inviting a call who are not PEERs at all. > > Currently my Asterisk setup sends, "*SIP/2.0 603 Declined" *to any stranger > invites because my dialplan includes Hangup(). Is there any way I can not > send a 603 declined so to mislead the probe runner? >Have you tried disabling guests? sip.conf [general] allowguest=no -- Paul Belanger Digium, Inc. | Software Developer twitter: pabelanger | IRC: pabelanger (Freenode) Check us out at: http://digium.com & http://asterisk.org