mc_: Do I need to keep port 5060 open if I use port 7000? There are whole bunch of scanners trying to access this port and I receive an email about any unsuccessful attempt

System Alert: wrong_call_state 10001 to nouser (inbound) on unknown(unknown)

over 9 000 emails every month

mentax if nothing valid is using 5060 then no

leave it open for your FS boxes - they probably are using 5060 to send invites.

to the SBCs

mentax: as brian- says, leave it open facing FS at least, but if you don't have any customers or carriers sending to 5060, then block it on the public NIC in kam

I think carrier send invite to 5060 =(

I will try to contact them and change the port to 7000

hope it will work