topic Re: no SIP Logs in Firewall and Security Management

no SIP Logs

Nikolai_Borhart — Tue, 13 Oct 2020 07:31:44 GMT

Hello Community,

I have something very strange here on the Firewall Gateway R80.30.

The customer has configured communication between a server and voice system via the SIP port UDP 5060.

This communication is not logged, however, I did not find any entries in the logs. But I can see exactly via TCP Dump that this communication is present on the interfaces.

I also have all the rules on logging in the policy, I checked this separately.

As a service I created a new UDP service and only set port 5060. Has anyone seen or had anything like this?

best regards

Nikolai

Re: no SIP Logs

G_W_Albrecht — Tue, 13 Oct 2020 07:41:05 GMT

maybe dropped ? Try zdebug drop...

Re: no SIP Logs

Nikolai_Borhart — Tue, 13 Oct 2020 08:11:48 GMT

I made fw ctl zdebug drop on the firewall gateway and I have no entries for this communication in it.

But via TCP Dump I see this communication coming in at the inbound interface and out at the outbound interface.

Re: no SIP Logs

G_W_Albrecht — Tue, 13 Oct 2020 08:14:44 GMT

Log implicit rules ?

Re: no SIP Logs

Nikolai_Borhart — Tue, 13 Oct 2020 08:21:28 GMT

Log Imlied Rules is activated under Global Properties-> Firewall.

Re: no SIP Logs

G_W_Albrecht — Tue, 13 Oct 2020 11:48:33 GMT

Contact TAC - if you see connections in TCP dump that do not show in logs that is an issue !

Re: no SIP Logs

Leader_Kiongi — Wed, 23 Nov 2022 16:26:40 GMT

Hello @Nikolai_Borhart ,

Did you find a solution to this issue ? I've the same exact problem.

Thanks !

Regards,