asterisk users - Aug 2012 - alwaysauthreject=yes not working as expected

Asterisk 1.4.42

Set alwaysauthreject=yes in [general] section of sip.conf.
Restarted asterisk

However when I attempt to register I still get:
[2012-08-08 21:11:34] NOTICE[15689] chan_sip.c: Registration from
'<sip:0003330822222261336 at domain.com>' failed for
'121.98.1.1' - Wrong
password
[2012-08-08 21:12:42] NOTICE[15689] chan_sip.c: Registration from
'<sip:000333082222226133 at domain.com>' failed for
'121.98.1.1' - No matching
peer found

Based on the Asterisk security advisory
(http://downloads.asterisk.org/pub/security/AST-2011-011.html) I would have
expected 1.4.42 to respond the same in both cases (since the issue was fixed
in 1.4.41.2). Am I missing something obvious?

> Asterisk 1.4.42
> 
> Set alwaysauthreject=yes in [general] section of sip.conf.
> Restarted asterisk
> 
> However when I attempt to register I still get:
> [2012-08-08 21:11:34] NOTICE[15689] chan_sip.c: Registration from
> '<sip:0003330822222261336 at domain.com>' failed for
'121.98.1.1' -
> Wrong
> password
> [2012-08-08 21:12:42] NOTICE[15689] chan_sip.c: Registration from
> '<sip:000333082222226133 at domain.com>' failed for
'121.98.1.1' - No
> matching
> peer found
> 
> Based on the Asterisk security advisory
> (http://downloads.asterisk.org/pub/security/AST-2011-011.html) I
> would have
> expected 1.4.42 to respond the same in both cases (since the issue
> was fixed
> in 1.4.41.2). Am I missing something obvious?
Yes.

Those are log messages for the administrator's benefit.  They are not
SIP messages sent in response to the REGISTER request.  The SIP
messages sent are supposed to be the same not the logging messages.

Richard