Best firewall config?

FreePBX Security
5

IIRC, sngrep captures traffic before iptables. Do you see these INVITEs or REGISTERs in asterisk?

pjsip set logger on

Or if you are using ChanSIP

sip set debug on

ETA: Blacklist Not Working as Expected