We are currently working on similar 'redirection' issue but on H323. These are complex issues and do not know if you would be able to resolve it without CP support asking you to provide some kernel debugs but couple of things that are listed in CP sk on sip_any/sip may help: 1. You should either use 'sip' or 'sip_any' in your rule because each of them behave differently and depends upon how your rule/sip_proxy/sip_domain are setup. 2. If your rule has 'src' or 'dst' as any and 'sip gateway' is configured as 'sip_proxy', using 'sip' would be okay but if 'gateway' is not configured as 'sip_proxy', connection redirection would fail. 3. If your rule has 'src' or 'dst' as 'any', using 'sip_any' may be okay if your gateway is not defined as 'sip_proxy but your voip domain is external to firewall.
this may help a bit to start, if not, the best is to run thru kernel debugs/fw monitor dumps and provide to CP support. rajeev On Thu, Jul 17, 2008 at 3:50 AM, Trevor Lee <[EMAIL PROTECTED]> wrote: > Hi, > > We are running NGX R65 HFA02 and are experiencing SIP errors when trying > to place calls. > > We get the following in SmartView Tracker: > > sip reason: Illegal redirection 192.168.100.x->192.168.200.x > > We have tried setting up a VoIP Domain in Smart Dashboard, and using > sip/sip_any in the policy. All SmartDefense options for SIP are off. > I've searched SecureKnowledge, Google, etc, etc and cannot find how to > rectify this. > > If anyone could point me in the right direction, it would be greatly > appreciated. > > Thanks > > Trevor. > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
