[asterisk-users] Securing Asterisk - How to avoid sending, "SIP/2.0 603 Declined"

[Bruce B]

Yeah, a 403 would still not be accepted. Thanks for the input.

So, what do you do with the firewall? You are suggesting just to allow
trusted parties and not others? Well, that is not possible in my case. Vast
number of scattered users all over the globe. I hate to think there is no
way to not announce ourselves as a SIP server to un-trusted users.

Or is there something else that can be done with the firewall to all
"dynamic" trust IPs and drop packets from unregistered sources?

Thanks again

On Fri, Jul 22, 2011 at 10:04 PM, Paul Belanger <pabelanger at digium.com>wrote:

> On 11-07-22 09:51 PM, Alex Balashov wrote:
>
>> Paul,
>>
>> Won't that just send a 403 Forbidden?
>>
>>  I believe so, but I was proposing a different SIP message then 603
> Declined.  As you mentioned, a firewall is the real solution if OP wants to
> drop packets.
>
> Asterisk is a B2BUA, not a firewall.
>
>
> --
> Paul Belanger
> Digium, Inc. | Software Developer
> twitter: pabelanger | IRC: pabelanger (Freenode)
> Check us out at: http://digium.com & http://asterisk.org
>
> --
> ______________________________**______________________________**_________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>              http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>  http://lists.digium.com/**mailman/listinfo/asterisk-**users<http://lists.digium.com/mailman/listinfo/asterisk-users>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110722/063a5e46/attachment.htm>