16 Sep
2016
16 Sep
'16
2:54 a.m.
Hi all - my Kamailio - 4.1.6 is receiving this particular structured INVITES from multiple
IPs, and for some reason it is not requesting authentication. I have AUTH & IPAUTH
modules in use for two years now, but this is bypassing that and actually forwarding the
invite to asterisk servers behind Kamailio.
I notice from the invite that the contact (c=IN IP4 10.10.10.10) is unusual and in the
private range. Is this what is bypassing Authentication?
Any Pointers on how to stop this. This is flooding my boxes!
==========================================
2016/09/16 06:45:16.824768 83.48.28.27:63029 -> MYPUBLICIP:5060
INVITE sip:9441134018000@MYPUBLICIPSIP/2.0
Via: SIP/2.0/UDP 83.48.28.27:5060;branch=z9hG4bK898408493
Max-Forwards: 70
From: "442030930112" <sip:442030930112@83.48.28.27>;tag=5044916148
To: <sip:9441134018000@MYPUBLICIP>
Contact: <sip:442030930112@83.48.28.27>
Call-ID: 9xCjfQkrmDwT7D6AqM0BTYAgmWjG84nq
CSeq: 102 INVITE
User-Agent: SIP Call
Date: Fri, 16 Sep 2016 05:45:48 +0000
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, INFO, MESSAGE
Supported: replaces, timer
Content-Type: application/sdp
Content-Length: 308
v=0
o=442030930112 8982 1536 IN IP4 10.10.10.10
s=SIP
c=IN IP4 10.10.10.10
t=0 0
m=audio 14806 RTP/AVP 0 3 8 4 18 101
a=rtpmap:0 PCMA/8000
a=rtpmap:3 GSM/8000
a=rtpmap:8 PCMU/8000
a=rtpmap:4 G723/8000
a=rtpmap:18 G729/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=sendrecv
Regards
Eric