For registration on voip server the standard port is 5060. For security reasons, iptables rules forbade requests for port 5060 from any addresses except one static (customer support).

Now the problem is that there are clients using dynamic ip-addresses (ios,android sip clients). By what principle would it be right to organize access to the server for such customers?

closed as unclear what you're asking by Steffen Ullrich, Polynomial, Xiong Chiamiov, Matthew, M'vy Feb 15 '18 at 10:58

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • I don't think that the question can be answered in the current form. It looks like you want to restrict access to the port for specific clients but you give no details about the clients. Based on this no restrictions are possible. Apart from this, iptables can mostly restrict access only on IP+port, i.e. if you have any other criteria (which you don't say) you need to use application layer filtering. – Steffen Ullrich Feb 13 '18 at 12:24
  • Besides, SIP is typically UDP, which has far less guarantees than TCP about the origin IP address. – a CVn Feb 13 '18 at 15:07

Browse other questions tagged or ask your own question.