[SR-Users] Kamailio Authentication failing

[Eric Koome]

Hi all - my Kamailio - 4.1.6 is receiving this particular structured INVITES from multiple IPs, and for some reason it is not requesting authentication. I have AUTH & IPAUTH modules in use for two years now, but this is bypassing that and actually forwarding the invite to asterisk servers behind Kamailio.

I notice from the invite that the contact (c=IN IP4 10.10.10.10) is unusual and in the private range. Is this what is bypassing Authentication?

Any Pointers on how to stop this. This is flooding my boxes!

==========================================

2016/09/16 06:45:16.824768 83.48.28.27:63029 -> MYPUBLICIP:5060
INVITE sip:9441134018000 at MYPUBLICIPSIP/2.0
Via: SIP/2.0/UDP 83.48.28.27:5060;branch=z9hG4bK898408493
Max-Forwards: 70
From: "442030930112" <sip:442030930112 at 83.48.28.27>;tag=5044916148
To: <sip:9441134018000 at MYPUBLICIP>
Contact: <sip:442030930112 at 83.48.28.27>
Call-ID: 9xCjfQkrmDwT7D6AqM0BTYAgmWjG84nq
CSeq: 102 INVITE
User-Agent: SIP Call
Date: Fri, 16 Sep 2016 05:45:48 +0000
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, INFO, MESSAGE
Supported: replaces, timer
Content-Type: application/sdp
Content-Length: 308

v=0
o=442030930112 8982 1536 IN IP4 10.10.10.10
s=SIP
c=IN IP4 10.10.10.10
t=0 0
m=audio 14806 RTP/AVP 0 3 8 4 18 101
a=rtpmap:0 PCMA/8000
a=rtpmap:3 GSM/8000
a=rtpmap:8 PCMU/8000
a=rtpmap:4 G723/8000
a=rtpmap:18 G729/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=sendrecv

Regards

Eric

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20160916/7f4aae33/attachment.html>