[zamadatix]

Checking the fragment offset is the right way to run the ALG but the router really shouldn't be running a SIP ALG by default either. Not only do most home users not use SIP but most SIP users don't need the ALG. Browsers could also block the ports but that's a hack to work around the issue not a proper fix.

[nyolfen]

i have good news, the routers spectrum began sending out this year not only have SIP ALG enabled but no way to disable it. in fact, just about the only thing you can change is DNS, and only via a smartphone app(!)

[neurostimulant]

My new-ish TP-Link router also has SIP ALG enabled by default.

[Arnavion]

Could be worse. You could have a router with a quantum ALG.

http://screenshots.portforward.com/routers/Arris/NVG468MQ_-_...

Does Disable mean disable the ALG? Or disable the passthrough and thus enable the ALG? You'll have to observe the traffic to find out.

(The internet generally believes it's the former. Me, I put mine into bridged mode because I use my own router anyway.)

[azinman2]

But is it vulnerable to ignoring fragmentation offset?