Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.001] VOIP Security doesn't work !!!

I have aproblem with VOIP Security in V7.001! When I disable VoIP Security I can receive calls and dial and I have voice traffic!!! But when I configure VoIP Security the phone is ringing but NO voice traffic is possible! Also when I use my voip-phone I can dial but still NO voice traffic! I configured at the server option my sip-provider and the client is my voip-phone. 
Is this a known bug???? Packet Filter log shows the following:


ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 
ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 
ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 
ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 
ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 
ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 
ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 
ulogd[2541]: id="2016" severity="info" sys="SecureNet" sub="packetfilter" name="SIP call RTP" action="SIP call RTP" fwrule="60018" initf="eth0" outitf="eth1" dstmac="xx:xx:xx:xx:xx:xx" srcmac="xx:xx:xx:xx:xx:xx" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="200" tos="0x00" prec="0xc0" ttl="127" srcport="5004" dstport="36594" 

Does anyone has the VoiP Security working? If so please let me know.


This thread was automatically locked due to age.
Parents Reply Children
  • Well, now I enabled VoIP-security and rebooted the ASG-box. Now the phone won't connect to my sip-provider and I see the following in the Packet Filter log:

    2007:02:26-19:57:17 (none) ulogd[2539]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" dstmac="00:0e:a6:bb:27[:D]b" srcmac="00:01:e3:76:c1:fc" srcip="voip-phone ip" dstip="sip-provider ip" proto="17" length="495" tos="0x00" prec="0x00" ttl="127" srcport="5060" dstport="5060" 

    So now it's BLOCKED! I configured it now in VoIP Security: server: voip-provider and client: voip-phone. This is really killing me, why won't it work? [:(]