[Freeswitch-users] connexion attempts behing a firewall (wtf?)

Bzzz lazyvirus at gmx.com
Sun Mar 11 19:11:11 MSK 2012


Hi,

I just setup an FS svr w/ fusionpbx (only ext.+users created), and I
found THAT in the FS log:

2012-03-11 16:51:30.795812 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth.
2012-03-11 16:51:30.795812 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [88775950945170 at 86.68.18.226] from ip 72.55.156.56
2012-03-11 16:51:31.115813 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth.
2012-03-11 16:51:31.115813 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [011441212790583 at 86.68.18.226] from ip 72.55.156.56
2012-03-11 16:51:31.985813 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth.
2012-03-11 16:51:31.985813 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [00441212790587 at 86.68.18.226] from ip 72.55.156.56
2012-03-11 16:51:33.015828 [DEBUG] sofia.c:7567 IP 72.55.156.56 Rejected by acl "domains". Falling back to Digest auth.
2012-03-11 16:51:33.015828 [WARNING] sofia_reg.c:1422 SIP auth challenge (INVITE) on sofia profile 'internal' for [000441212790581 at 86.68.18.226] from ip 72.55.156.56

How can this freak reach my svr as I'm in my LAN and my modem box
integrates a firewall.

Oook (but not): just checked my box and found that there are 4
uPNP new rules:
 0	 UDP 	 5060 	 192.168.1.25 	 5060 
 1 	 TCP 	 5060 	 192.168.1.25 	 5060 
 2 	 UDP 	 5080 	 192.168.1.25 	 5080 
 3 	 TCP 	 5080 	 192.168.1.25 	 5080

I understand FS is opening these ports to be reached by external
subscribers, but where can I stop it to do so until I made my
internal tests, change these ports and limited VoIP to TLS only?

JY
-- 
masturbation, n.:
	Coming unscrewed.



Join us at ClueCon 2011 Aug 9-11, 2011
More information about the FreeSWITCH-users mailing list