Firewall not blocking IP

[F1 Fan]

Hi

We have a SIP PBX behind UT and all works well. We have a rogue external IP who is trying to register on our PBX which is slowing it down.

I want to block their IP on the firewall and have set up the following rule.

Action: Block
Traffic Type: ANY
Source Interface: External (tried any too)
Destination: any
Source Address: 64.xx.xx.xxx (also tried with /32 netmask)
Destination: any
Source Port: any
Destination: any

I also tried with logging on and off. But it does not block this IP.

I have SIP bypass turned on but I also tried turning it off and it does not work either.

Any ideas?

[F1 Fan]

Question was answered and solved by UT Support. Thanks guys

[mrunkel]

The answer is that SIP traffic doesn't hit the UVM. You have to use the packet filter to block it.