[asterisk-users] how can I get authenticate from my own server?

[Steven Howes]

On 17 Jan 2014, at 02:18, Sean Darcy <seandarcy2 at gmail.com> wrote:
> I'm  used to seeing fraudulent attempts to authenticate, But now I'm getting them from the server itself.
> 
> I have an asterisk server behind a firewalled router. The local subnet is 10.10.10.0/24, the server is 10.10.10.100.
> 
> Now I'm seeing in the log lots of:
> 
> Failed to authenticate device <*>00<sip:<*>00 at 10.10.10.100:5060>;tag=9c565e6e
> 
> How can this happen?

I’d get an actual SIP trace rather than relying on the logs. If you get it at IP level, it’s a little harder to spoof (i.e. sometimes the SIP headers contain nonsense)

Steve