<font face="verdana,sans-serif"></font><br><div class="gmail_quote">On Mon, Aug 8, 2011 at 6:03 PM, Faisal Hanif <span dir="ltr"><<a href="mailto:faisal@vopium.com">faisal@vopium.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div link="blue" vlink="purple" lang="EN-US"><div><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">If you take a bit deep analyses on SIP packet you will be able to understand the issue,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Iptables filter on layer-3 while SIP is on layer-7. It is easily possible to generate a SIP packet with different source-ip than physical interface.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">You can also simulate it if you set external-ip=some-else-ip in SIP.com in asterisk. All you SIP packets will contain new some-else-ip while layer-3 headers will still have actual physical interface IP.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><br></span></p></div></div></blockquote><div><br>I am usingOS (Elastix distribution).<br>I am not really a champ at system administration.... hence this went over the top.<br>
<br>I will observe the system tonight and send my feedback tomorrow.<br><br>Thx to everyone for being with me on this.<br>Sans<br></div></div>