Hi, I just setup an FS svr w/ fusionpbx (only ext.+users created), and I found THAT in the FS log: 2012-03-11 16:51:30.795812 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth. 2012-03-11 16:51:30.795812 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [88775950945170@86.68.18.226] from ip 72.55.156.56 2012-03-11 16:51:31.115813 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth. 2012-03-11 16:51:31.115813 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [011441212790583@86.68.18.226] from ip 72.55.156.56 2012-03-11 16:51:31.985813 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth. 2012-03-11 16:51:31.985813 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [00441212790587@86.68.18.226] from ip 72.55.156.56 2012-03-11 16:51:33.015828 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth. 2012-03-11 16:51:33.015828 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [000441212790581@86.68.18.226] from ip 72.55.156.56 How can this freak reach my svr as I'm in my LAN and my modem box integrates a firewall. Oook (but not): just checked my box and found that there are 4 uPNP new rules: 0 UDP 5060 192.168.1.25 5060 1 TCP 5060 192.168.1.25 5060 2 UDP 5080 192.168.1.25 5080 3 TCP 5080 192.168.1.25 5080 I understand FS is opening these ports to be reached by external subscribers, but where can I stop it to do so until I made my internal tests, change these ports and limited VoIP to TLS only? JY -- masturbation, n.: Coming unscrewed.