On Wed, Jan 11, 2017, at 11:09 AM, Thufir Hawat wrote: > The SIP trace shows messages from what I took to be a suspicious > connection from sip:[email protected] so I added that IP address to IP > tables...but then anveo showed as unreachable so I removed that rule. > > Yes, I'm running fail2ban. > > What are these messages from sip:[email protected]? The domain name alone > set off alarm bells for me. (I was looking for my own registration > attempts when I turned on SIP debugging.)
It's just a keepalive from their end to determine that your SIP server is still reachable and to keep open any NAT mappings so you are reachable. -- Joshua Colp Digium, Inc. | Senior Software Developer 445 Jan Davis Drive NW - Huntsville, AL 35806 - US Check us out at: www.digium.com & www.asterisk.org -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
