Yes, I was just surprised that the call had two way audio considering the call 
was traversing a NAT and not going through sipxbridge which anchors the media.  

-M

>>> Tony Graziano <tgrazi...@myitdepartment.net> 08/07/10 8:46 AM >>>
Calls to the system will have a dest port of 5060 (sip), not 5080, they are
not itsp calls going through sipxbridge. This is how one sip system can call
another.
============================
Tony Graziano, Manager
Telephone: 434.984.8430
Fax: 434.984.8431

Email: tgrazi...@myitdepartment.net

LAN/Telephony/Security and Control Systems Helpdesk:
Telephone: 434.984.8426
Fax: 434.984.8427

Helpdesk Contract Customers:
http://www.myitdepartment.net/gethelp/

----- Original Message -----
From: Tony Graziano <tgrazi...@myitdepartment.net>
To: Matt White <mwh...@thesummit-grp.com>
Cc: sipx-users@list.sipfoundry.org <sipx-users@list.sipfoundry.org>
Sent: Sat Aug 07 08:36:47 2010
Subject: Re: [sipx-users] Blocking SIP URI Calls from the innternet

No. It's a sip call. That's perfectly normal. ANY sip call from the Internet
to a user on the system would not be requiring permissions or even to pass
through a gateway. Only outgoing calls do that.

Probably a sipvicious variant. If your system is setup properly I'm not sure
I would worry. If you don't want to it to that you can consider blocking
measures at your firewall.  There is NO way to prevent this altogether as it
is byproduct of the protocol.

You can't have an email system available to the internet without it saying
hello. You cannot have a sip server on the internet trying to reach a user
AND ask for credentials, because then noone gets to say hello.

On Sat, Aug 7, 2010 at 7:43 AM, Matt White <mwh...@thesummit-grp.com> wrote:

> I have a client that looks like its getting calls from Russia on port
> 5060.  It is not coming from the bridge.
>
> The calls come in from various sources and seem to be sending invites to
> random common extensions causing the phones to ring.
>
> I would have expected the invite to be challenged as this is coming on on
> port 5060...not 5080 (sipxbridge).  But its not challenged,  the invite
> comes in and then sipxproxy sends a "trying" and starts ringing the phone.
>
> In fact, I was surprised that I could use a softphone on a remote PC that
> is not registered or connected to a sipx user and send a call to
> e...@externalip and the call would not only ring, but completes with two
> way audio.
>
> How is this possible without SipXBridge handling the call?  Its almost
> like
> Sipxrelay is treating these as remote workers and anchoring the media.
>
> -M
>
>
>
> _______________________________________________
> sipx-users mailing list
> sipx-users@list.sipfoundry.org
> List Archive: http://list.sipfoundry.org/archive/sipx-users/
>



-- 
======================
Tony Graziano, Manager
Telephone: 434.984.8430
sip: tgrazi...@voice.myitdepartment.net
Fax: 434.984.8431

Email: tgrazi...@myitdepartment.net

LAN/Telephony/Security and Control Systems Helpdesk:
Telephone: 434.984.8426
sip: helpd...@voice.myitdepartment.net
Fax: 434.984.8427

Helpdesk Contract Customers:
http://www.myitdepartment.net/gethelp/

Why do mathematicians always confuse Halloween and Christmas?
Because 31 Oct = 25 Dec.

-- 
This email was Anti Virus checked by the Summit Technology Consulting Groups 
Astaro Security Gateway. http://www.astaro.com

_______________________________________________
sipx-users mailing list
sipx-users@list.sipfoundry.org
List Archive: http://list.sipfoundry.org/archive/sipx-users/

Reply via email to