<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Calibri","sans-serif";
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page Section1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext="edit">
  <o:idmap v:ext="edit" data="1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=EN-NZ link=blue vlink=purple>

<div class=Section1>

<p class=MsoNormal>I have an error which is driving me crazy:<o:p></o:p></p>

<p class=MsoNormal>Jul 24 16:58:34 beta /sbin/openser[5446]:
ERROR:core:udp_send: sendto(sock,0x81aaed8,825,0,0xb61216f0,16): Operation not
permitted(1)<o:p></o:p></p>

<p class=MsoNormal>Jul 24 16:58:34 beta /sbin/openser[5446]: ERROR:tm:msg_send:
udp_send failed<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>This is firewall related because when I turn iptables off
the problem goes away. But although all ACCEPT and DENY messages are logged by
the firewall, there is no corresponding message logged. <o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>When a call is made between two UACs and the far end
attempts to answer the call, the call is not answered successfully. The
dialogue is shown below.<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>If I turn the firewall off, start a call and then turn the
firewall on the call continues successfully. However the next call is not
successful. We use Mediaproxy and I suspect that is trying to do some
communication that is being blocked by the firewall but that is only a
suspicion. The dialogue for this call is shown at the bottom.<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>When comparing these two dialogues with the firewall turned
on:<o:p></o:p></p>

<p class=MsoNormal>- when the callee answers, OpenSER receives a 200 OK but
doesn&#8217;t immediately pass that on to the caller <o:p></o:p></p>

<p class=MsoNormal>- after a number of 200 messages from the callee, OpenSER
sends the 200 to the caller but the Contact is the private IP address whereas
when the firewall is turned off it is the public IP address<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>I have also included the iptables config. Note that some
lines are commented out due to the testing I&#8217;m doing and IP addresses
have been changed.<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>Any advice on the changes required would be appreciated.<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>Thanks<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>****************************<o:p></o:p></p>

<p class=MsoNormal>SIP dialogue with firewall on<o:p></o:p></p>

<p class=MsoNormal>U 58.28.001.001:5060 -&gt; 147.202.001.001:5060INVITE
sip:44556644@domain.com:5060;user=phone SIP/2.0..Via: SIP/2.0/UDP
192.168.1.102;branch=z9hG4bK31ee9ba27B17140D..From: &quot;CSB&quot;
&lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..To:
&lt;sip:44556644@domain.com;user=phone&gt;..CSeq: 1 INVITE..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..Contact:
&lt;sip:44556648@192.168.1.102&gt;..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS,
INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Supported:
100rel,replaces..Allow-Events: talk,hold,conference..Max-Forwards:
70..Content-Type: application/sdp..Content-Length: 251....v=0..o=- 1216790239
1216790239 IN IP4 192.168.1.102..s=Polycom IP Phone..c=IN IP4
192.168.1.102..t=0 0..m=audio 2222 RTP/AVP 0 8 18 101..a=sendrecv..a=rtpmap:0
PCMU/8000..a=rtpmap:8 PCMA/8000..a=rtpmap:18 G729/8000..a=rtpmap:101
telephone-event/8000..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 100
Giving a try..Via: SIP/2.0/UDP
192.168.1.102;branch=z9hG4bK31ee9ba27B17140D;rport=5060;received=58.28.001.001..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..To:
&lt;sip:44556644@domain.com;user=phone&gt;..CSeq: 1 INVITE..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..Server: OpenSER (1.3.2-notls
(i386/linux))..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5065INVITE
sip:44556644@192.168.1.124:5065 SIP/2.0..Record-Route: &lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Via:
SIP/2.0/UDP 147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..To:
&lt;sip:44556644@domain.com;user=phone&gt;..CSeq: 1 INVITE..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..Contact:
&lt;sip:44556648@58.28.001.001:5060&gt;..Allow: INVITE, ACK, BYE, CANCEL,
OPTIONS, INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Supported:
100rel,replaces..Allow-Events: talk,hold,conference..Max-Forwards:
69..Content-Type: application/sdp..Content-Length: 253....v=0..o=- 1216790239
1216790239 IN IP4 192.168.1.102..s=Polycom IP Phone..c=IN IP4
147.202.001.001..t=0 0..m=audio 35982 RTP/AVP 0 8 18
101..a=sendrecv..a=rtpmap:0 PCMU/8000..a=rtpmap:8 PCMA/8000..a=rtpmap:18
G729/8000..a=rtpmap:101 telephone-event/8000..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 100
Trying..To: &lt;sip:44556644@domain.com;user=phone&gt;..From: &quot;CSB&quot;
&lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 180
Ringing..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP 147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via:
SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 180
Ringing..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 298748 298748 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To: &lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP 192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 298748 298748 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 298748 298748 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server: Linksys/SPA962-5.1.18(SC)..Content-Length:
208..Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER..Supported:
replaces..Content-Type: application/sdp....v=0..o=- 298748 298748 IN IP4
192.168.1.124..s=-..c=IN IP4 192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0
101..a=rtpmap:0 PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 298748 298748 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server: Linksys/SPA962-5.1.18(SC)..Content-Length:
208..Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER..Supported:
replaces..Content-Type: application/sdp....v=0..o=- 298748 298748 IN IP4
192.168.1.124..s=-..c=IN IP4 192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0
101..a=rtpmap:0 PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5060 -&gt; 147.202.001.001:5060ACK
sip:44556644@192.168.1.124:5065 SIP/2.0..Via: SIP/2.0/UDP
192.168.1.102;branch=z9hG4bK4b4d0d4aF803AD55..From: &quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..CSeq: 1
ACK..Call-ID: 7f806604-ea80e337-e14b8216@192.168.1.102..Contact:
&lt;sip:44556648@192.168.1.102&gt;..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS,
INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Max-Forwards: 70..Content-Length:
0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 192.168.1.124:5065ACK
sip:44556644@192.168.1.124:5065 SIP/2.0..Record-Route:
&lt;sip:147.202.001.001;lr=on;ftag=566CA8D1-4C8E0458&gt;..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK4b4d0d4aF803AD55..Via: SIP/2.0/UDP
192.168.1.102;received=58.28.001.001;branch=z9hG4bK4b4d0d4aF803AD55..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..CSeq: 1
ACK..Call-ID: 7f806604-ea80e337-e14b8216@192.168.1.102..Contact: &lt;sip:44556648@192.168.1.102&gt;..Allow:
INVITE, ACK, BYE, CANCEL, OPTIONS, INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK,
UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Max-Forwards: 69..Content-Length:
0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To: &lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server: Linksys/SPA962-5.1.18(SC)..Content-Length:
208..Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER..Supported:
replaces..Content-Type: application/sdp....v=0..o=- 298748 298748 IN IP4
192.168.1.124..s=-..c=IN IP4 192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0
101..a=rtpmap:0 PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 298748 298748 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To: &lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bK07da.73971d95.0..Via: SIP/2.0/UDP 192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 298748 298748 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bK31ee9ba27B17140D..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 298748 298748 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16424 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060BYE
sip:44556648@58.28.001.001:5060 SIP/2.0..Via: SIP/2.0/UDP
192.168.1.124:5065;branch=z9hG4bK-947b0ac7..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 101 BYE..Max-Forwards:
70..Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..User-Agent:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060BYE
sip:44556648@58.28.001.001:5060 SIP/2.0..Record-Route: &lt;sip:147.202.001.001;lr=on;ftag=e07209dc8d8de14fi5&gt;..Via:
SIP/2.0/UDP 147.202.001.001;branch=z9hG4bKc0cc.a198b237.0..Via: SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-947b0ac7..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 101 BYE..Max-Forwards:
69..User-Agent: Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5060 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..Via: SIP/2.0/UDP 147.202.001.001;branch=z9hG4bKc0cc.a198b237.0..Via:
SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-947b0ac7..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..CSeq:
101 BYE..Call-ID: 7f806604-ea80e337-e14b8216@192.168.1.102..Contact:
&lt;sip:44556648@192.168.1.102&gt;..Record-Route:
&lt;sip:147.202.001.001;lr=on;ftag=e07209dc8d8de14fi5&gt;..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5065SIP/2.0 200
OK..Via: SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-947b0ac7..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..CSeq:
101 BYE..Call-ID: 7f806604-ea80e337-e14b8216@192.168.1.102..Contact:
&lt;sip:44556648@58.28.001.001:5060&gt;..Record-Route:
&lt;sip:147.202.001.001;lr=on;ftag=e07209dc8d8de14fi5&gt;..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060BYE
sip:44556648@58.28.001.001:5060 SIP/2.0..Via: SIP/2.0/UDP
192.168.1.124:5065;branch=z9hG4bK-947b0ac7..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..To: &quot;CSB&quot;
&lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..Call-ID:
7f806604-ea80e337-e14b8216@192.168.1.102..CSeq: 101 BYE..Max-Forwards:
70..Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=566CA8D1-4C8E0458;lr=on&gt;..User-Agent:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5065SIP/2.0 200
OK..Via: SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-947b0ac7..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=e07209dc8d8de14fi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=566CA8D1-4C8E0458..CSeq:
101 BYE..Call-ID: 7f806604-ea80e337-e14b8216@192.168.1.102..Contact:
&lt;sip:44556648@58.28.001.001:5060&gt;..Record-Route:
&lt;sip:147.202.001.001;lr=on;ftag=e07209dc8d8de14fi5&gt;..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>**************************************<o:p></o:p></p>

<p class=MsoNormal>SIP dialogue with Firewall off<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5060 -&gt; 147.202.001.001:5060INVITE
sip:44556644@domain.com:5060;user=phone SIP/2.0..Via: SIP/2.0/UDP
192.168.1.102;branch=z9hG4bKca52e47AD4AD366..From: &quot;CSB&quot;
&lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..To:
&lt;sip:44556644@domain.com;user=phone&gt;..CSeq: 1 INVITE..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..Contact:
&lt;sip:44556648@192.168.1.102&gt;..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS,
INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Supported:
100rel,replaces..Allow-Events: talk,hold,conference..Max-Forwards:
70..Content-Type: application/sdp..Content-Length: 251....v=0..o=- 1216790431
1216790431 IN IP4 192.168.1.102..s=Polycom IP Phone..c=IN IP4
192.168.1.102..t=0 0..m=audio 2224 RTP/AVP 0 8 18 101..a=sendrecv..a=rtpmap:0
PCMU/8000..a=rtpmap:8 PCMA/8000..a=rtpmap:18 G729/8000..a=rtpmap:101
telephone-event/8000..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 100
Giving a try..Via: SIP/2.0/UDP
192.168.1.102;branch=z9hG4bKca52e47AD4AD366;rport=5060;received=58.28.001.001..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..To:
&lt;sip:44556644@domain.com;user=phone&gt;..CSeq: 1 INVITE..Call-ID: 26e8c161-7e674928-90cba56b@192.168.1.102..Server:
OpenSER (1.3.2-notls (i386/linux))..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5065INVITE
sip:44556644@192.168.1.124:5065 SIP/2.0..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bKf294.1cda4646.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..To:
&lt;sip:44556644@domain.com;user=phone&gt;..CSeq: 1 INVITE..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..Contact:
&lt;sip:44556648@58.28.001.001:5060&gt;..Allow: INVITE, ACK, BYE, CANCEL,
OPTIONS, INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Supported:
100rel,replaces..Allow-Events: talk,hold,conference..Max-Forwards:
69..Content-Type: application/sdp..Content-Length: 253....v=0..o=- 1216790431
1216790431 IN IP4 192.168.1.102..s=Polycom IP Phone..c=IN IP4
147.202.001.001..t=0 0..m=audio 35984 RTP/AVP 0 8 18
101..a=sendrecv..a=rtpmap:0 PCMU/8000..a=rtpmap:8 PCMA/8000..a=rtpmap:18
G729/8000..a=rtpmap:101 telephone-event/8000..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 100
Trying..To: &lt;sip:44556644@domain.com;user=phone&gt;..From: &quot;CSB&quot;
&lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bKf294.1cda4646.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 180
Ringing..To: &lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bKf294.1cda4646.0..Via: SIP/2.0/UDP 192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 180
Ringing..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP 192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To: &lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bKf294.1cda4646.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server: Linksys/SPA962-5.1.18(SC)..Content-Length:
208..Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER..Supported:
replaces..Content-Type: application/sdp....v=0..o=- 317989 317989 IN IP4
192.168.1.124..s=-..c=IN IP4 192.168.1.124..t=0 0..m=audio 16426 RTP/AVP 0
101..a=rtpmap:0 PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Contact:
&lt;sip:44556644@58.28.001.001:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 209..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 317989 317989 IN IP4 192.168.1.124..s=-..c=IN IP4
147.202.001.001..t=0 0..m=audio 35984 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5060 -&gt; 147.202.001.001:5060ACK
sip:44556644@58.28.001.001:5065 SIP/2.0..Via: SIP/2.0/UDP
192.168.1.102;branch=z9hG4bK9bb7064fBA56088E..From: &quot;CSB&quot;
&lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..CSeq: 1
ACK..Call-ID: 26e8c161-7e674928-90cba56b@192.168.1.102..Contact:
&lt;sip:44556648@192.168.1.102&gt;..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS,
INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Max-Forwards: 70..Content-Length:
0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5065ACK
sip:44556644@58.28.001.001:5065 SIP/2.0..Record-Route:
&lt;sip:147.202.001.001;lr=on;ftag=3D7BF99A-F3B3ACE5&gt;..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bKf294.1cda4646.2..Via: SIP/2.0/UDP
192.168.1.102;received=58.28.001.001;branch=z9hG4bK9bb7064fBA56088E..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..CSeq: 1
ACK..Call-ID: 26e8c161-7e674928-90cba56b@192.168.1.102..Contact:
&lt;sip:44556648@192.168.1.102&gt;..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS,
INFO, MESSAGE, SUBSCRIBE, NOTIFY, PRACK, UPDATE, REFER..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Max-Forwards: 69..Content-Length:
0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..To:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bKf294.1cda4646.0..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Contact:
&lt;sip:44556644@192.168.1.124:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 208..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 317989 317989 IN IP4 192.168.1.124..s=-..c=IN IP4
192.168.1.124..t=0 0..m=audio 16426 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060SIP/2.0 200
OK..To: &lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..From:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 1 INVITE..Via: SIP/2.0/UDP
192.168.1.102;rport=5060;received=58.28.001.001;branch=z9hG4bKca52e47AD4AD366..Record-Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..Contact:
&lt;sip:44556644@58.28.001.001:5065&gt;..Server:
Linksys/SPA962-5.1.18(SC)..Content-Length: 209..Allow: ACK, BYE, CANCEL, INFO,
INVITE, NOTIFY, OPTIONS, REFER..Supported: replaces..Content-Type:
application/sdp....v=0..o=- 317989 317989 IN IP4 192.168.1.124..s=-..c=IN IP4
147.202.001.001..t=0 0..m=audio 35984 RTP/AVP 0 101..a=rtpmap:0
PCMU/8000..a=rtpmap:101 telephone-event/8000..a=fmtp:101
0-15..a=ptime:30..a=sendrecv..<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060BYE
sip:44556648@58.28.001.001:5060 SIP/2.0..Via: SIP/2.0/UDP
192.168.1.124:5065;branch=z9hG4bK-6829d146..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 101 BYE..Max-Forwards:
70..Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..User-Agent:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5060BYE
sip:44556648@58.28.001.001:5060 SIP/2.0..Record-Route:
&lt;sip:147.202.001.001;lr=on;ftag=9f9da889431cd5afi5&gt;..Via: SIP/2.0/UDP
147.202.001.001;branch=z9hG4bKac76.c88550f.0..Via: SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-6829d146..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 101 BYE..Max-Forwards: 69..User-Agent:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5060 -&gt; 147.202.001.001:5060SIP/2.0 200
OK..Via: SIP/2.0/UDP 147.202.001.001;branch=z9hG4bKac76.c88550f.0..Via:
SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-6829d146..From: &lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..CSeq:
101 BYE..Call-ID: 26e8c161-7e674928-90cba56b@192.168.1.102..Contact:
&lt;sip:44556648@192.168.1.102&gt;..Record-Route: &lt;sip:147.202.001.001;lr=on;ftag=9f9da889431cd5afi5&gt;..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5065SIP/2.0 200
OK..Via: SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-6829d146..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..CSeq:
101 BYE..Call-ID: 26e8c161-7e674928-90cba56b@192.168.1.102..Contact:
&lt;sip:44556648@58.28.001.001:5060&gt;..Record-Route: &lt;sip:147.202.001.001;lr=on;ftag=9f9da889431cd5afi5&gt;..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 58.28.001.001:5065 -&gt; 147.202.001.001:5060BYE
sip:44556648@58.28.001.001:5060 SIP/2.0..Via: SIP/2.0/UDP
192.168.1.124:5065;branch=z9hG4bK-6829d146..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..Call-ID:
26e8c161-7e674928-90cba56b@192.168.1.102..CSeq: 101 BYE..Max-Forwards: 70..Route:
&lt;sip:147.202.001.001:5060;nat=yes;ftag=3D7BF99A-F3B3ACE5;lr=on&gt;..User-Agent:
Linksys/SPA962-5.1.18(SC)..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>U 147.202.001.001:5060 -&gt; 58.28.001.001:5065SIP/2.0 200 OK..Via:
SIP/2.0/UDP
192.168.1.124:5065;received=58.28.001.001;branch=z9hG4bK-6829d146..From:
&lt;sip:44556644@domain.com;user=phone&gt;;tag=9f9da889431cd5afi5..To:
&quot;CSB&quot; &lt;sip:44556648@domain.com&gt;;tag=3D7BF99A-F3B3ACE5..CSeq:
101 BYE..Call-ID: 26e8c161-7e674928-90cba56b@192.168.1.102..Contact:
&lt;sip:44556648@58.28.001.001:5060&gt;..Record-Route:
&lt;sip:147.202.001.001;lr=on;ftag=9f9da889431cd5afi5&gt;..User-Agent:
PolycomSoundPointIP-SPIP_320-UA/2.1.1.0037..Content-Length: 0....<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>**************************<o:p></o:p></p>

<p class=MsoNormal>iptables config<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp;&nbsp; -m state --state
ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -m state --state
ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j
ACCEPT<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># Rule 0 (tun0,tun1,tun2)<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 0 (tun0,tun1,tun2)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N In_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i tun0&nbsp; -m state --state
NEW&nbsp; -j In_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i tun1&nbsp; -m state --state
NEW&nbsp; -j In_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i tun2&nbsp; -m state --state
NEW&nbsp; -j In_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -i tun0&nbsp; -m state --state
NEW&nbsp; -j In_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -i tun1&nbsp; -m state --state
NEW&nbsp; -j In_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -i tun2&nbsp; -m state --state
NEW&nbsp; -j In_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_0&nbsp; -j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 0 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_0&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Out_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o tun0&nbsp; -m state --state
NEW&nbsp; -j Out_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o tun1&nbsp; -m state --state
NEW&nbsp; -j Out_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o tun2&nbsp; -m state --state
NEW&nbsp; -j Out_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -o tun0&nbsp; -m state --state
NEW&nbsp; -j Out_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -o tun1&nbsp; -m state --state
NEW&nbsp; -j Out_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -o tun2&nbsp; -m state --state
NEW&nbsp; -j Out_RULE_0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_0&nbsp; -j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 0 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_0 &nbsp;-j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_0&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># Rule 1 (lo)<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 1 (lo)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N In_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i lo -p icmp&nbsp; -m icmp&nbsp;
--icmp-type any&nbsp; -m state --state NEW&nbsp; -j In_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i lo -p tcp -m tcp&nbsp; -m multiport&nbsp;
--dports 25060,8008,25,443,80,22,3306,5060&nbsp; -m state --state NEW&nbsp; -j
In_RULE_1<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A INPUT&nbsp; -i lo -p udp -m udp&nbsp; -m
multiport&nbsp; --dports 5060,1813&nbsp; -m state --state NEW&nbsp; -j
In_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i lo -p udp -m udp&nbsp; -m
multiport&nbsp; --dports 1:55000&nbsp; -m state --state NEW&nbsp; -j In_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_1&nbsp; -j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 1 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_1&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Out_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o lo -p icmp&nbsp; -m icmp&nbsp;
--icmp-type any&nbsp; -m state --state NEW&nbsp; -j Out_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o lo -p tcp -m tcp&nbsp; -m
multiport&nbsp; --dports 25060,8008,25,443,80,22,3306,5060&nbsp; -m state
--state NEW&nbsp; -j Out_RULE_1<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A OUTPUT&nbsp; -o lo -p udp -m udp&nbsp; -m
multiport&nbsp; --dports 5060,1813&nbsp; -m state --state NEW&nbsp; -j
Out_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o lo -p udp -m udp&nbsp; -m
multiport&nbsp; --dports 1:55000&nbsp; -m state --state NEW&nbsp; -j Out_RULE_1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_1&nbsp; -j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 1 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_1&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># Rule 2 (eth0)<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 2 (eth0)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Out_RULE_2<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o eth0&nbsp; -d 10.8.1.1&nbsp; -m
state --state NEW&nbsp; -j Out_RULE_2<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -o eth0&nbsp; -d 10.8.1.1&nbsp;
-m state --state NEW&nbsp; -j Out_RULE_2<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_2 &nbsp;-j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 2 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_2&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># Rule 3 (eth0)<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 3 (eth0)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># ping test for nagios<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Cid485B0E561900.0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i eth0&nbsp; -d
147.202.001.001&nbsp; -m state --state NEW&nbsp; -j Cid485B0E561900.0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Cid485B0E561900.1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E561900.0 -p icmp&nbsp; -m icmp&nbsp;
--icmp-type any&nbsp; -j Cid485B0E561900.1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E561900.0 -p tcp -m tcp&nbsp; -m
multiport&nbsp; --dports 25,3306&nbsp; -j Cid485B0E561900.1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N In_RULE_3<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E561900.1&nbsp; -s 203.89.001.001&nbsp;
-j In_RULE_3<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E561900.1&nbsp; -s 58.28.001.001&nbsp;
-j In_RULE_3<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E561900.1&nbsp; -s 64.38.001.001&nbsp;
-j In_RULE_3<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_3&nbsp; -j LOG&nbsp; --log-level warning
--log-prefix &quot;RULE 3 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_3&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 4 (eth0)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># ping test for nagios<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Cid485B0E6A1900.0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o eth0&nbsp; -s
147.202.001.001&nbsp; -m state --state NEW&nbsp; -j Cid485B0E6A1900.0<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Cid485B0E6A1900.1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E6A1900.0 -p icmp&nbsp; -m icmp&nbsp;
--icmp-type any&nbsp; -j Cid485B0E6A1900.1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E6A1900.0 -p tcp -m tcp&nbsp; -m
multiport&nbsp; --dports 25,3306&nbsp; -j Cid485B0E6A1900.1<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Out_RULE_4<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E6A1900.1&nbsp; -d 203.89.001.001&nbsp;
-j Out_RULE_4<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E6A1900.1&nbsp; -d 58.28.001.001&nbsp;
-j Out_RULE_4<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Cid485B0E6A1900.1&nbsp; -d 64.38.001.001&nbsp;
-j Out_RULE_4<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_4&nbsp; -j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 4 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_4&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># Rule 5 (eth0)<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 5 (eth0)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N In_RULE_5<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i eth0 -p tcp -m tcp&nbsp; -m
multiport&nbsp; -d 147.202.001.001&nbsp; --dports
5060,22,443,80,53,25060,8008&nbsp; -m state --state NEW&nbsp; -j In_RULE_5<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A INPUT&nbsp; -i eth0 -p udp -m udp&nbsp; -d
147.202.001.001&nbsp; --dport 10000:20000&nbsp; -m state --state NEW&nbsp; -j
In_RULE_5<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A INPUT&nbsp; -i eth0 -p udp -m udp&nbsp; -d
147.202.001.001&nbsp; --dport 35000:36000&nbsp; -m state --state NEW&nbsp; -j
In_RULE_5<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A INPUT&nbsp; -i eth0 -p udp -m udp&nbsp; -m
multiport&nbsp; -d 147.202.001.001&nbsp; --dports
1194,5065,5060,53,10000:20000,35000:36000&nbsp; -m state --state NEW&nbsp; -j
In_RULE_5<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -i eth0 -p udp -m udp&nbsp; -m
multiport --dports 1:55000&nbsp; -m state --state NEW&nbsp; -j In_RULE_5<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_5&nbsp; -j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 5 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A In_RULE_5&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># Rule 6 (eth0)<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 6 (eth0)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N Out_RULE_6<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o eth0 -p tcp -m tcp&nbsp; -m
multiport&nbsp; -s 147.202.001.001&nbsp; --dports
22,53,80,443,5060,8008,25060,25&nbsp; -m state --state NEW&nbsp; -j Out_RULE_6<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A OUTPUT&nbsp; -o eth0 -p udp -m udp&nbsp; -s
147.202.001.001&nbsp; --dport 10000:20000&nbsp; -m state --state NEW&nbsp; -j
Out_RULE_6<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A OUTPUT&nbsp; -o eth0 -p udp -m udp&nbsp; -s
147.202.001.001&nbsp; --dport 35000:36000&nbsp; -m state --state NEW&nbsp; -j
Out_RULE_6<o:p></o:p></p>

<p class=MsoNormal>#$IPTABLES -A OUTPUT&nbsp; -o eth0 -p udp -m udp&nbsp; -m
multiport&nbsp; -s 147.202.001.001&nbsp; --dports
53,1194,5060,5065,1813,123,10000:20000,35000:36000&nbsp; -m state --state
NEW&nbsp; -j Out_RULE_6<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -o eth0 -p udp -m udp&nbsp; -m
multiport&nbsp; --dports 1:55000&nbsp; -m state --state NEW&nbsp; -j Out_RULE_6<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_6&nbsp; -j LOG&nbsp; --log-level
warning --log-prefix &quot;RULE 6 -- ACCEPT &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A Out_RULE_6&nbsp; -j ACCEPT<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal># Rule 7 (global)<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>echo &quot;Rule 7 (global)&quot;<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -N RULE_7<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A OUTPUT&nbsp; -j RULE_7<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A INPUT&nbsp; -j RULE_7<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A FORWARD&nbsp; -j RULE_7<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A RULE_7&nbsp; -j LOG&nbsp; --log-level warning
--log-prefix &quot;RULE 7 -- DENY &quot;<o:p></o:p></p>

<p class=MsoNormal>$IPTABLES -A RULE_7&nbsp; -j DROP<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal>#<o:p></o:p></p>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

</div>

</body>

</html>