[asterisk-users] Firewall Issue

[RSCL Mumbai]

Update:
Yesterday I did not observe any unexpected traffic.

So far so good.

Thx
Sans




On Mon, Aug 8, 2011 at 9:24 PM, Антон Квашёнкин <anton.jugatsu at gmail.com>wrote:

> Ok, run your script and then do this:
> service iptables save
>
> And by the way, list "chkconfig --list iptables" output.
>
> 2011/8/8 RSCL Mumbai <rscl.mumbai at gmail.com>
>
>>
>> On Mon, Aug 8, 2011 at 6:03 PM, Faisal Hanif <faisal at vopium.com> wrote:
>>
>>> If you take a bit deep analyses on SIP packet you will be able to
>>> understand the issue,****
>>>
>>> ** **
>>>
>>> Iptables filter on layer-3 while SIP is on layer-7. It is easily possible
>>> to generate a SIP packet with different source-ip than physical interface.
>>> ****
>>>
>>> ** **
>>>
>>> You can also simulate it if you set external-ip=some-else-ip in SIP.com
>>> in asterisk. All you SIP packets will contain new some-else-ip while layer-3
>>> headers will still have actual physical interface IP.****
>>>
>>>
>>>
>> I am usingOS (Elastix distribution).
>> I am not really a champ at system administration.... hence this went over
>> the top.
>>
>> I will observe the system tonight and send my feedback tomorrow.
>>
>> Thx to everyone for being with me on this.
>> Sans
>>
>> --
>> _____________________________________________________________________
>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>> New to Asterisk? Join us for a live introductory webinar every Thurs:
>>               http://www.asterisk.org/hello
>>
>> asterisk-users mailing list
>> To UNSUBSCRIBE or update options visit:
>>   http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110809/02e167d8/attachment.htm>