The behaviour of latested firmware has changed regarding SIP intrusion
the detected intrusions are dropped, but the ip adress of hacker is no more copied in the blocked ip adress list of the firewall

can you tell us more about these security features

thanks
Henri