Asterisk does not expose low-level control of its SIP stack. It's something intended to be configured and used at the application level.
If you really want to do this without a firewall, put a Kamailio proxy in front of your Asterisk install and drop things as you see fit. But why go through the trouble? What's wrong with iptables? -- Alex Balashov - Principal Evariste Systems LLC 260 Peachtree Street NW Suite 2200 Atlanta, GA 30303 Tel: +1-678-954-0670 Fax: +1-404-961-1892 Web: http://www.evaristesys.com/ On Jul 22, 2011, at 9:30 PM, Bruce B <[email protected]> wrote: > Thanks for the input. I am really surprised. But yes, I want exactly what > firewall does, DROP packet instead of REJECTING it. > > So, you are saying that one has to tamper the SIP stack to add the option to > not respond to un-trusted sources? > I really thought Asterisk might have this built in as a feature. > > > I can't even do a dialplan search for a registered PEER because even if I > find the IP to not be a trusted I still need to Hangup() on the invite which > in turn send 603 Declined. > > There isn't really any work-around to this? > > Thanks again > > > On Fri, Jul 22, 2011 at 7:39 PM, Alex Balashov <[email protected]> > wrote: > On 07/22/2011 07:32 PM, Bruce B wrote: > Hello, > > I am wondering if there is a way to drop SIP packets for generic > transactions? For example, only SIP PEERs are allowed to call in and > receive ACK or Declined rather that those inviting a call who are not > PEERs at all. > > Currently my Asterisk setup sends, "*SIP/2.0 603 Declined" *to any > stranger invites because my dialplan includes Hangup(). Is there any > way I can not send a 603 declined so to mislead the probe runner? > > There is really no way to accomplish that except with a firewall. > > > -- > Alex Balashov - Principal > Evariste Systems LLC > 260 Peachtree Street NW > Suite 2200 > Atlanta, GA 30303 > Tel: +1-678-954-0670 > Fax: +1-404-961-1892 > Web: http://www.evaristesys.com/ > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
