Good Morning All,

I'm using a 2860 router to provide SIP connectivity to my PBX, no problems.

The one issue I have, after setting up a trace, is that the router is being bombarded by an alien Public ip address which is trying to make SIP calls from my network.

The calls are failing as I see a 403 error as the hacker does not have the username and password of the SIP account.

My question is how do I modify my router just to allow public connectivity to a certain group of public addresses, basically to block and would be hacker.

I understand it is under filter tables ?

Any help would be grateful


Thank you in advance.

This knowledgebase article covers how to limit access to port forwards to a specified set of IP addresses:
http://www.draytek.co.uk/support/guides/kb-ipfilter-allowing-inbound-traffic

Additionally, the 3.8.4 firmware for the 2860 adds functionality to specify a single IP Object (Single IP, Subnet or IP Range) that is allowed to access your port forwards, which is a quick way of doing what you want. Anything coming in not matching that IP object is blocked by the router.

Hi thanks for the quick reply.

I have looked for the firmware upgrade but cannot find it for the model 2860,

Vigor 2860
Vigor 2860n
Vigor 2860Vn
Vigor 2860n-Plus
Vigor 2860Vn-Plus
Vigor 2860ac
Vigor 2860Vac
Vigor 2860L
Vigor 2860Ln


Release Notes
F/W 3.8.4BT / Recommended (576D17)
F/W 3.8.4 (548006 / non vector)
F/W 3.8.4 (567517 / vector1)
F/W 3.8.4 (574307 / vector2)
F/W 3.8.4 (576D17 / vector3)
User Guide (Manual


where will I find or which other one could I use ?





regards

If you're in the UK the BT recommended one is the one to use. On my 2860n+ the 3.8.4 firmware has negated my ability to connect a wifi modem on WAN2 so I've reverted to 3.8.2.3. Support are supposed to be looking in to this.

Have had loads of trouble with the "BT" versions (modem code 576D17) doing continual retrains every few minutes. This is over 3 FTTC lines in Essex, 2 short good quality and one long marginal line. In my case I have had to shift down to vector1 version and select modem code 566207 in order to get it to stabilise. Others have had this issue but apparently support have failed to identify any problem. Some people have had to go all the way down to non vector version but for me that just knocks the line speed down.

I have to assume that maybe it's certain cabinet firmware / boards in some areas. So the lesson from that is, start with the BT version, and go to a lower one only if the line goes hinkey.