Blacklist IP addresses

The IP address whitelist/blacklist can be used to blacklist ranges of IP addresses based on the P-Source-Device header in the SIP INVITE. To whitelist/blacklist by IP address, the appropriate header must be present in the SIP INVITE to communicate the information to ClearIP.

P-Source-Device Header

Here is an example SIP Invite with a P-Source-Device header.

INVITE sip:+18554742536@sip.clearip.com:5060 SIP/2.0
Via: SIP/2.0/TCP sip.clearip.com:5060
From: <sip:+14045266060@transnexus.com:5060>
To: <sip:+18554742536@sip.clearip.com:5060>
P-Source-Device: 104.248.129.175
Call-ID: 123456
CSeq: 1 INVITE
Content-Length: 0

If the SIP Invite contains a P-Source-Device header, the source IP address is populated in the P Source Device column in the SIP Messages page.

Protect ClearIP Proxy from Unknown Devices

ClearIP users who use the ClearIP Proxy should set up a firewall to protect the host server running the ClearIP Proxy. However, ClearIP can also perform the same function using the IP Address Whitelist/Blacklist. ClearIP should receive calls through the ClearIP Proxy from familiar devices such as the telephone service provider’s softswitches or SBC’s and external provider devices.

In the below example, calls from all devices except the specified softswitch and devices belonging to the providers are blacklisted. For the calls that are received by familiar devices, the rest of the whitelist/blacklist policies such as Blacklisted Calling Numbers or Calling SPIDs still apply.