Preferably, turn off port forwarding for port 5060 in your firewall, and set Alive Notify to Options, and set an appropriate notify time to keep the port open to your provider. This will stop "drive by" SIP connections.

Otherwise, set your firewall to only allow SIP connections from your SIP provider. Remote clients such as SIP extensions should use a VPN.


You know.. that guy.. with the thing.