[asterisk-users] Securing Asterisk - How to avoid sending, "SIP/2.0 603 Declined"

[Bruce B]

Thanks for the input. I am really surprised. But yes, I want exactly what
firewall does, DROP packet instead of REJECTING it.

So, you are saying that one has to tamper the SIP stack to add the option to
not respond to un-trusted sources?
I really thought Asterisk might have this built in as a feature.


I can't even do a dialplan search for a registered PEER because even if I
find the IP to not be a trusted I still need to Hangup() on the invite which
in turn send 603 Declined.

There isn't really any work-around to this?

Thanks again


On Fri, Jul 22, 2011 at 7:39 PM, Alex Balashov <abalashov at evaristesys.com>wrote:

> On 07/22/2011 07:32 PM, Bruce B wrote:
>
>> Hello,
>>
>> I am wondering if there is a way to drop SIP packets for generic
>> transactions? For example, only SIP PEERs are allowed to call in and
>> receive ACK or Declined rather that those inviting a call who are not
>> PEERs at all.
>>
>> Currently my Asterisk setup sends, "*SIP/2.0 603 Declined" *to any
>> stranger invites because my dialplan includes Hangup(). Is there any
>> way I can not send a 603 declined so to mislead the probe runner?
>>
>
> There is really no way to accomplish that except with a firewall.
>
>
> --
> Alex Balashov - Principal
> Evariste Systems LLC
> 260 Peachtree Street NW
> Suite 2200
> Atlanta, GA 30303
> Tel: +1-678-954-0670
> Fax: +1-404-961-1892
> Web: http://www.evaristesys.com/
>
> --
> ______________________________**______________________________**_________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>              http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>  http://lists.digium.com/**mailman/listinfo/asterisk-**users<http://lists.digium.com/mailman/listinfo/asterisk-users>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110722/8fd00ea5/attachment.htm>