>>>>> "EW" == Eric Wieling <ewiel...@nyigc.com> writes:
EW> Basically, the traffic is coming from 65.211.180.237 but the header is: EW> f: <sip:+1347545xxx@199.173.94.80:5060;user=phone>;tag=4-45026-159e4a6-995949f-159e4a6 The From: header and the socket ip are often different. Check for Via: headers. Those show the path of the SIP. In your example, look for a Via which mentions 65.211.180.237. Note that the From does not necessary have to be a sip address reachable from the outside. -JimC -- James Cloos <cl...@jhcloos.com> OpenPGP: 0x997A9F17ED7DAEA6 -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users