Hi, I’m getting some calls in my logs, from unauthorized users, coming from-sip-external.
I don’t allow anonymous SIP from external.
The attackers get an Answer, then a hangup. But why do they get an answer at all, is there something wrong with my setup?
Any help appreciated.
Freepbx version is 2.5.2.3
The relevant log looks like:
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [001318769221000@from-sip-external:1] NoOp("SIP/5060-b7705808", "Received incoming SIP connection from unknown peer to 001318769221000") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [001318769221000@from-sip-external:2] Set("SIP/5060-b7705808", "DID=001318769221000") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [001318769221000@from-sip-external:3] Goto("SIP/5060-b7705808", "s|1") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Goto (from-sip-external,s,1)
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [s@from-sip-external:1] GotoIf("SIP/5060-b7705808", "0?from-trunk|001318769221000|1") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [s@from-sip-external:2] Set("SIP/5060-b7705808", "TIMEOUT(absolute)=15") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Channel will hangup at 2010-08-04 21:02:40 UTC.
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [s@from-sip-external:3] Answer("SIP/5060-b7705808", "") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [s@from-sip-external:4] Wait("SIP/5060-b7705808", "2") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: == Spawn extension (from-sip-external, s, 4) exited non-zero on 'SIP/5060-b7705808'
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [h@from-sip-external:1] NoOp("SIP/5060-b7705808", "Hangup") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [h@from-sip-external:2] Set("SIP/5060-b7705808", "DID=s") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [h@from-sip-external:3] Goto("SIP/5060-b7705808", "s|1") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Goto (from-sip-external,s,1)
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [s@from-sip-external:1] GotoIf("SIP/5060-b7705808", "0?from-trunk|s|1") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [s@from-sip-external:2] Set("SIP/5060-b7705808", "TIMEOUT(absolute)=15") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Channel will hangup at 2010-08-04 21:02:40 UTC.
[Aug 5 07:02:25] VERBOSE[13554] logger.c: -- Executing [s@from-sip-external:3] Answer("SIP/5060-b7705808", "") in new stack
[Aug 5 07:02:25] VERBOSE[13554] logger.c: == Spawn extension (from-sip-external, s, 3) exited non-zero on 'SIP/5060-b7705808'