Ok, run your script and then do this:<br>service iptables save<br><br>And by the way, list "chkconfig --list iptables" output.<br><br><div class="gmail_quote">2011/8/8 RSCL Mumbai <span dir="ltr"><<a href="mailto:rscl.mumbai@gmail.com">rscl.mumbai@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><font face="verdana,sans-serif"></font><br><div class="gmail_quote"><div class="im">On Mon, Aug 8, 2011 at 6:03 PM, Faisal Hanif <span dir="ltr"><<a href="mailto:faisal@vopium.com" target="_blank">faisal@vopium.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US"><div><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">If you take a bit deep analyses on SIP packet you will be able to understand the issue,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Iptables filter on layer-3 while SIP is on layer-7. It is easily possible to generate a SIP packet with different source-ip than physical interface.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">You can also simulate it if you set external-ip=some-else-ip in SIP.com in asterisk. All you SIP packets will contain new some-else-ip while layer-3 headers will still have actual physical interface IP.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><br></span></p></div></div></blockquote></div><div><br>I am usingOS (Elastix distribution).<br>I am not really a champ at system administration.... hence this went over the top.<br>
<br>I will observe the system tonight and send my feedback tomorrow.<br><br>Thx to everyone for being with me on this.<br>Sans<br></div></div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br>