10 sep 2009 kl. 17.35 skrev Alex Balashov:

> Andrew Stewart wrote:
>
>> Figured out the problem.  There is an "inspect sip" command in our
>> global policy map on our Cisco ASA firewall.  That was "fixing" the
>> CALL-ID.  Took it out and all is working now.
>
> Ah, yes.  Those ALGs (or other >= Layer 5 manglers, whatever the
> justification) will always get you.  :-)  I was pouring over the  
> capture
> you provided, thinking, "This really doesn't add up..."

You were lucky that you could disable it. I've met cases where  
firewalls have a smart SIP something feature that can't be disabled  
and enabled it was successful in disabling all media stream by  
publishing RFC1918 addresses on the outside.

Ouch.

/O

_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

AstriCon 2009 - October 13 - 15 Phoenix, Arizona
Register Now: http://www.astricon.net

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to