<div dir="ltr">It may be result of wrong SIP messages send by client example in<div><a href="https://freeswitch.org/jira/browse/FS-7530">https://freeswitch.org/jira/browse/FS-7530</a><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, May 28, 2015 at 3:08 PM, Markus von Arx <span dir="ltr"><<a href="mailto:mkvonarx@gmail.com" target="_blank">mkvonarx@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Hallo</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Our customers are complaining that their FreeSWITCH instances are sometimes sending SIP messages from another port than the configured 5060 UDP port. They observe some SIP messages coming from ports in the range 10000 - 10005.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">I could verify this in Wireshark traces from our customers. The behavior seems to be quite sporadic. In one instance, I see that the FreeSWITCH sends an INVITE from port 10000, then resends the same INVITE 1 second later (normal SIP resend/retry), but this time from port 5060. Strange.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Some logs from their firewall:</div>000066: May 26 2015 17:36:59.874 CEDT: %SEC-6-IPACCESSLOGP: list ACL-WAN-IN denied udp 10.193.97.34(5060) -> 10.193.109.34(10001), 1 packet<br>…<br>000166: May 26 2015 17:46:18.115 CEDT: %SEC-6-IPACCESSLOGP: list ACL-WAN-IN denied udp 10.193.97.34(5060) -> 10.193.109.34(10003), 1 packet<br>000167: May 26 2015 17:46:51.521 CEDT: %SEC-6-IPACCESSLOGP: list ACL-WAN-IN denied udp 10.193.97.34(5060) -> 10.193.109.34(10000), 16 packets<br>000168: May 26 2015 17:47:51.520 CEDT: %SEC-6-IPACCESSLOGP: list ACL-WAN-IN denied udp 10.193.97.34(5060) -> 10.193.109.34(10001), 17 packets<br>000169: May 26 2015 17:49:51.519 CEDT: %SEC-6-IPACCESSLOGP: list ACL-WAN-IN denied udp 10.193.97.34(5060) -> 10.193.109.34(10002), 16 packets<div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">=> Any idea what might cause this behavior? Maybe some configuration that we haven't set correctly? Or maybe even a (known) FreeSWITCH bug?</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Btw: using FreeSWITCH 1.4.15, 64bit, running on Windows Server.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Thanks for any help and best regards,</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Markus</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>