Значит свежепоставленный Elastix 2.2 анонимные звоники отключены (по дефолту) смотрю в логи и и вижу попытки позвонить. Собственно вопрос как это так и как защитить?
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Executing [900441235372118@from-sip-external:1] NoOp("SIP/117.120.6.102-000000d1", "Received incoming SIP connection from unknown peer to 900441235372118") in new stack
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Executing [900441235372118@from-sip-external:2] Set("SIP/117.120.6.102-000000d1", "DID=900441235372118") in new stack
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Executing [900441235372118@from-sip-external:3] Goto("SIP/117.120.6.102-000000d1", "s,1") in new stack
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Goto (from-sip-external,s,1)
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Executing [s@from-sip-external:1] GotoIf("SIP/117.120.6.102-000000d1", "0?checklang:noanonymous") in new stack
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Goto (from-sip-external,s,5)
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Executing [s@from-sip-external:5] Set("SIP/117.120.6.102-000000d1", "TIMEOUT(absolute)=15") in new stack
[Sep 30 20:23:18] VERBOSE[21268] func_timeout.c: Channel will hangup at 2011-09-30 20:23:33.760 MSD.
[Sep 30 20:23:18] VERBOSE[21268] pbx.c: -- Executing [s@from-sip-external:6] Answer("SIP/117.120.6.102-000000d1", "") in new stack
[Sep 30 20:23:19] VERBOSE[21268] pbx.c: -- Executing [s@from-sip-external:7] Wait("SIP/117.120.6.102-000000d1", "2") in new stack
[Sep 30 20:23:21] VERBOSE[21268] pbx.c: -- Executing [s@from-sip-external:8] Playback("SIP/117.120.6.102-000000d1", "ss-noservice") in new stack
[Sep 30 20:23:21] VERBOSE[21268] file.c: -- <SIP/117.120.6.102-000000d1> Playing 'ss-noservice.gsm' (language 'en')
[Sep 30 20:23:26] VERBOSE[21268] pbx.c: -- Executing [s@from-sip-external:9] PlayTones("SIP/117.120.6.102-000000d1", "congestion") in new stack
[Sep 30 20:23:26] VERBOSE[21268] pbx.c: -- Executing [s@from-sip-external:10] Congestion("SIP/117.120.6.102-000000d1", "5") in new stack
[Sep 30 20:23:31] VERBOSE[21268] pbx.c: == Spawn extension (from-sip-external, s, 10) exited non-zero on 'SIP/117.120.6.102-000000d1'
[Sep 30 20:23:31] VERBOSE[21268] pbx.c: -- Executing [h@from-sip-external:1] Hangup("SIP/117.120.6.102-000000d1", "") in new stack
[Sep 30 20:23:31] VERBOSE[21268] pbx.c: == Spawn extension (from-sip-external, h, 1) exited non-zero on 'SIP/117.120.6.102-000000d1'
[Sep 30 20:23:50] WARNING[12226] chan_sip.c: Retransmission timeout reached on transmission sy7bUGjDZ5u2azJH88D6 for seqno 101 (Critical Response) -- See https://wiki.asterisk.org/wiki/display/AST/SIP+Retransmissions
Packet timed out after 32000ms with no response
PS: iptables я уже прикрыл весь входящий траффик из мира.
# grep alwaysauthreject /etc/asterisk/sip_general_additional.conf
alwaysauthreject=yes
fail2ban , sip.conf , iptables и конечно же гугл.
Задан: 2011-10-01 14:16:42 +0400
Просмотрен: 873 раз
Обновлен: Oct 02 '11
Проект компании "АТС Дизайн"
Asterisk® и Digium® являются зарегистрированными торговыми марками компании
Digium, Inc., США.
IP АТС Asterisk распространяется под лицензией
GNU GPL.