1 post / 0 new
acraft
acraft's picture
Joined: 2015/08/31
Points: 0

Hi everyone, we are seeing the following messages in the asterisk messages.log upon boot:

"[2016-12-07 09:18:57] WARNING[1686] chan_sip.c: !!! (config category='1004-demo' global force_rport='No' peer/user force_rport='Yes')
[2016-12-07 09:18:57] WARNING[1686] chan_sip.c: !!! PLEASE NOTE: Setting 'nat' for a peer/user that differs from the global setting can make
[2016-12-07 09:18:57] WARNING[1686] chan_sip.c: !!! the name of that peer/user discoverable by an attacker. Replies for non-existent peers/users
[2016-12-07 09:18:57] WARNING[1686] chan_sip.c: !!! will be sent to a different port than replies for an existing peer/user. If at all possible,
[2016-12-07 09:18:57] WARNING[1686] chan_sip.c: !!! use the global 'nat' setting and do not set 'nat' per peer/user."

Should this be concerning to us and if so what can be done to rectify it? We see the NAT=yes is set by default in the system settings at the extension level.