Sean Darcy
2014-Jan-17 02:18 UTC
[asterisk-users] how can I get authenticate from my own server?
I'm used to seeing fraudulent attempts to authenticate, But now I'm getting them from the server itself. I have an asterisk server behind a firewalled router. The local subnet is 10.10.10.0/24, the server is 10.10.10.100. Now I'm seeing in the log lots of: Failed to authenticate device <*>00<sip:<*>00 at 10.10.10.100:5060>;tag=9c565e6e How can this happen? sean
Steven Howes
2014-Jan-17 10:35 UTC
[asterisk-users] how can I get authenticate from my own server?
On 17 Jan 2014, at 02:18, Sean Darcy <seandarcy2 at gmail.com> wrote:> I'm used to seeing fraudulent attempts to authenticate, But now I'm getting them from the server itself. > > I have an asterisk server behind a firewalled router. The local subnet is 10.10.10.0/24, the server is 10.10.10.100. > > Now I'm seeing in the log lots of: > > Failed to authenticate device <*>00<sip:<*>00 at 10.10.10.100:5060>;tag=9c565e6e > > How can this happen?I?d get an actual SIP trace rather than relying on the logs. If you get it at IP level, it?s a little harder to spoof (i.e. sometimes the SIP headers contain nonsense) Steve