0 votes

Here is the SIP packet sent by zoiper (below). It is causing an error as there is no user called "yes", and so fail2ban kicks in and blocks the IP address.


Thanks in advance

Clive


REGISTER sip:196.22.x.x;transport=UDP SIP/2.0.
Via: SIP/2.0/UDP 192.168.1.102:57607;branch=z9hG4bK-524287-1---298a99c922eb0aca.
Max-Forwards: 70.
Contact: <sip:yes@192.168.1.102:57607;rinstance=0586945545f5571e;transport=UDP>.
To: <sip:yes@196.22.x.x;transport=UDP>.
From: <sip:yes@196.22.x.x;transport=UDP>;tag=fc50b27f.
Call-ID: DMpxmHxiyC0KRkt4M9Mrtw...
CSeq: 5 REGISTER.
Expires: 60.
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE.
User-Agent: Zoiper rd82a609.
Allow-Events: presence, kpml, talk.
Content-Length: 0.

in General by (120 points)

It seems that you have set an account with username "yes", if this is Zoiper for Android, you should go to Zoiper ->Settings -> Accounts  and check the usernames of the accounts which you have set.

Hi.


Thanks for the reply.

It seems Zoiper automaticaly does that to keep open the NAT.

The username is set correctly, to something other than "yes"  .


I was wondering if anyone else has this same behaviour.


None of the optional settings are set, only the gateway, username and password.

Thanks and regards

Clive

Hi,

Not possible to whitelist your provider IP range?

I am using different ports and TCP, but maybe you can only use UDP.

Sorry I am not using fail2ban.

Regards,

Paul

Hi Paul


The IP range is white listed, and that is why these registrations are reaching the SIP server.

I am still not sure why Zoiper sends these registration packets at all, and how one can stop this behaviour.


Thanks and regards

Clive




Hi Clive,


When I look at my logs I do not see such behaviour.
I assume you are using Linux?

Are you sure there is no account set with yes?
You did not forget to uninstall an app on your phone?

Sorry I am guessing what could be wrong.

Its a registration and if it succeeds it will use a keep alive, it wont re-register all the time.

Regards,

Paul

Please log in or register to answer this question.

Welcome!
Ask your questions and receive answers from other members of the Zoiper Community.

Did you check our Help Section?

You are a Zoiper Biz or Premium customer? If so, click HERE to get premium support.
2,438 questions
1,541 answers
2,314 comments
135,096 users