Alwaysauthreject=yes Not Working As Expected

Home » Asterisk Users » Alwaysauthreject=yes Not Working As Expected
Asterisk Users 3 Comments

Asterisk 1.4.42

Set alwaysauthreject=yes in [general] section of sip.conf. Restarted asterisk

However when I attempt to register I still get:
[2012-08-08 21:11:34] NOTICE[15689] chan_sip.c: Registration from
‘ failed for ‘121.98.1.1’ – Wrong password
[2012-08-08 21:12:42] NOTICE[15689] chan_sip.c: Registration from
‘ failed for ‘121.98.1.1’ – No matching peer found

Based on the Asterisk security advisory
(http://downloads.asterisk.org/pub/security/AST-2011-011.html) I would have expected 1.4.42 to respond the same in both cases (since the issue was fixed in 1.4.41.2). Am I missing something obvious?

3 thoughts on - Alwaysauthreject=yes Not Working As Expected

  • Yes.

    Those are log messages for the administrator’s benefit. They are not SIP messages sent in response to the REGISTER request. The SIP
    messages sent are supposed to be the same not the logging messages.

    Richard

  • Yes I agree they are supposed to be the same but they are not. Below is the dialog when a wrong password is provided with alwaysauthreject=yes:

    U 121.98.1.1:1025 -> 203.89.1.1:5060
    REGISTER sip:domain.com SIP/2.0..Via: SIP/2.0/UDP
    192.168.1.103:5060;branch=z9hG4bK-d8754z-d88996fba8b1fd8c-1—d8754z-
    ;rport..Max-Forwards: 70..C
    ontact: