[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.

Post Reply 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Preventing bogus SIP invites.
Author Message
Bryan Nelson Offline

Posts: 71
Joined: Feb 2013
Reputation: 0
Post: #2
RE: Preventing bogus SIP invites.
Different firewalls implement NAT rules differently, and it sounds like your router uses "Full cone NAT" which results in a port being mapped to the WAN connection which any external host can send packets to.

"Restricted Cone NAT" is a more secure form of NAT, as it will only allow communication with the IP address the NAT mapping was established with. This effectively blocks the random external IP's from sending an invite to the NAT'd port on your WAN IP address. It also prevents service scans.

More info can be found here: http://think-like-a-computer.com/2011/09...es-of-nat/

You may need to replace your router, as it's rare to have any way to configure this. Temporarily, you can change to using TCP as your SIP transport, and\or change your local SIP port to something out of the standard 5060-5065 port range the attackers frequently scan.

Hope this helps!
05-20-2015 06:54 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 

Messages In This Thread
Preventing bogus SIP invites. - Glacier - 05-19-2015, 07:49 PM
RE: Preventing bogus SIP invites. - Bryan Nelson - 05-20-2015 06:54 AM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  SIP INVITE Ghost/Bogus Calls - and Allow Direct IP Call settings michael@newcoit.com 19 68,413 11-04-2015 06:25 PM
Last Post: Fabrizio

Forum Jump:

User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication