The proxy handles NAT and anchors media. This is used for remote workers and happens automatically
--martin From: sipx-users-boun...@list.sipfoundry.org [mailto:sipx-users-boun...@list.sipfoundry.org] On Behalf Of Matt White Sent: Saturday, August 07, 2010 9:53 AM Cc: sipx-users@list.sipfoundry.org Subject: Re: [sipx-users] Blocking SIP URI Calls from the innternet Yes, I was just surprised that the call had two way audio considering the call was traversing a NAT and not going through sipxbridge which anchors the media. -M >>> Tony Graziano <tgrazi...@myitdepartment.net> 08/07/10 8:46 AM >>> Calls to the system will have a dest port of 5060 (sip), not 5080, they are not itsp calls going through sipxbridge. This is how one sip system can call another. ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: tgrazi...@myitdepartment.net LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ ----- Original Message ----- From: Tony Graziano <tgrazi...@myitdepartment.net> To: Matt White <mwh...@thesummit-grp.com> Cc: sipx-users@list.sipfoundry.org <sipx-users@list.sipfoundry.org> Sent: Sat Aug 07 08:36:47 2010 Subject: Re: [sipx-users] Blocking SIP URI Calls from the innternet No. It's a sip call. That's perfectly normal. ANY sip call from the Internet to a user on the system would not be requiring permissions or even to pass through a gateway. Only outgoing calls do that. Probably a sipvicious variant. If your system is setup properly I'm not sure I would worry. If you don't want to it to that you can consider blocking measures at your firewall. There is NO way to prevent this altogether as it is byproduct of the protocol. You can't have an email system available to the internet without it saying hello. You cannot have a sip server on the internet trying to reach a user AND ask for credentials, because then noone gets to say hello. On Sat, Aug 7, 2010 at 7:43 AM, Matt White <mwh...@thesummit-grp.com> wrote: > I have a client that looks like its getting calls from Russia on port > 5060. It is not coming from the bridge. > > The calls come in from various sources and seem to be sending invites to > random common extensions causing the phones to ring. > > I would have expected the invite to be challenged as this is coming on on > port 5060...not 5080 (sipxbridge). But its not challenged, the invite > comes in and then sipxproxy sends a "trying" and starts ringing the phone. > > In fact, I was surprised that I could use a softphone on a remote PC that > is not registered or connected to a sipx user and send a call to > e...@externalip and the call would not only ring, but completes with two > way audio. > > How is this possible without SipXBridge handling the call? Its almost > like > Sipxrelay is treating these as remote workers and anchoring the media. > > -M > > > > _______________________________________________ > sipx-users mailing list > sipx-users@list.sipfoundry.org > List Archive: http://list.sipfoundry.org/archive/sipx-users/ > -- ====================== Tony Graziano, Manager Telephone: 434.984.8430 sip: tgrazi...@voice.myitdepartment.net Fax: 434.984.8431 Email: tgrazi...@myitdepartment.net LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 sip: helpd...@voice.myitdepartment.net Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ Why do mathematicians always confuse Halloween and Christmas? Because 31 Oct = 25 Dec. -- This email was Anti Virus checked by the Summit Technology Consulting Groups Astaro Security Gateway. http://www.astaro.com
_______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users/