<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#ffffff">
<font face="Helvetica, Arial, sans-serif">Hello,<br>
<br>
any more input on this subject ?!<br>
<br>
<br>
Kind regards,<br>
Jonas.<br>
<br>
</font><br>
-------- Original Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Subject: </th>
<td>Re: [asterisk-users] SIP client floods port 5060 and gets
blocked</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Date: </th>
<td>Thu, 28 Oct 2010 13:42:12 +0200</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">From: </th>
<td>Jonas Kellens <a class="moz-txt-link-rfc2396E" href="mailto:jonas.kellens@telenet.be"><jonas.kellens@telenet.be></a></td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">To: </th>
<td>Asterisk Users Mailing List - Non-Commercial Discussion
<a class="moz-txt-link-rfc2396E" href="mailto:asterisk-users@lists.digium.com"><asterisk-users@lists.digium.com></a></td>
</tr>
</tbody>
</table>
<br>
<br>
<pre>On 10/28/2010 12:52 PM, Gordon Henderson wrote:
> On Thu, 28 Oct 2010, Jonas Kellens wrote
>> On 10/28/2010 10:44 AM, Kevin Keane wrote:
>>
>>> I assume that you checked and the remote IP is a legitimate IP phone? If
>>> not, it could be an attempt to break into your system.
>>>
>>> If it is a legitimate IP phone, make sure that the SIP configuration is
>>> correct -- if the SIP authentication fails, you can see this happening.
>>>
>>>
>> 1. This is a legitimate phone, yes.
>> 2. Registration goes as follow : REGISTER> SIP/2.0 401 Unauthorized>
>> Re-Register with Digest> 200 OK
>>
> Is it s Snom phone?
>
> I've seen Snoms do this...
>
> Gordon
>
I have this with Snom 320, Snom 370, Grandstream GXW4008 and YeaLink T28...
Jonas.
</pre>
</body>
</html>