TCP SIP ALG

I have noticed during testing that turning off the SIP alg service in Router OS only seems to apply to UDP.

As soon as I change my phone to TCP mode, SIP ALG starts functioning again.

Does anyone have any idea how to turn it off?



/ip firewall service-port disable sip

Should do the trick.

http://wiki.mikrotik.com/wiki/Manual:IP/Services#Service_Ports

That’s what I did, but it only seems to affect UDP.

On Cisco iOS you can toggle sip alg on TCP and UDP off independently of each other. I guess I’m wondering if it’s a known feature that this only works for UDP or a bug?

RouterOS’s implementation of SIP ALG applies to TCP and UDP.
The option “sip-timeout” only applies to UDP because of the nature of UDP is “connection-less”

I just gave a presentation on SIP ALG at the Mikrotik MUM in Denver Colorado 2017 explaining everything about SIP ALG in RouterOS
watch here:
https://youtu.be/tM7wyKdnIKA