Eric Smith
2012-Oct-01 20:13 UTC
[asterisk-users] deny=0.0.0.0.0/0.0.0.0.0 does not seem to block external access
I have the following in sip.conf for asterisk running on localhost. deny=0.0.0.0/0.0.0.0 permit=127.0.0.1/255.255.255.255 However, there is still repeated ill-intentioned access in this form: NOTICE[17550]: chan_sip.c:14847 handle_request_invite: Call from '' to extension '700972595637212' rejected because extension not found. I am running an ancient Asterisk 1.4.26.2 (yes I know what I should be doing). Why might the deny not be working? -- Eric Smith
Eric Wieling
2012-Oct-01 20:30 UTC
[asterisk-users] deny=0.0.0.0.0/0.0.0.0.0 does not seem to block external access
You do not have an exten => 700972595637212 in the context in extensions.conf that SIP device is set to in sip.conf -----Original Message----- From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Eric Smith Sent: Monday, October 01, 2012 4:13 PM To: asterisk-users at lists.digium.com Subject: [asterisk-users] deny=0.0.0.0.0/0.0.0.0.0 does not seem to block external access I have the following in sip.conf for asterisk running on localhost. deny=0.0.0.0/0.0.0.0 permit=127.0.0.1/255.255.255.255 However, there is still repeated ill-intentioned access in this form: NOTICE[17550]: chan_sip.c:14847 handle_request_invite: Call from '' to extension '700972595637212' rejected because extension not found. I am running an ancient Asterisk 1.4.26.2 (yes I know what I should be doing). Why might the deny not be working? -- Eric Smith -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Markus
2012-Oct-02 00:23 UTC
[asterisk-users] deny=0.0.0.0.0/0.0.0.0.0 does not seem to block external access
Am 01.10.2012 22:13, schrieb Eric Smith:> I have the following in sip.conf for asterisk running on localhost. > > deny=0.0.0.0/0.0.0.0 > permit=127.0.0.1/255.255.255.255Really on localhost only, no peers other than from 127.0.0.1? Not sure why deny/permit is not working, but you could do bindaddr=127.0.0.1 in your sip.conf.
Apparently Analagous Threads
- how to used SIPp for sip load testing
- Asterisk + voxbone ==> Failed to authenticate user
- Interesting attack tonight & fail2ban them
- chan_sip.c:23647 handle_request_invite: Failed to authenticate device
- Asterisk/Cisco AS5300 => Two problems in incoming (extension not found)