hi, how do u prevent unauthorized usage or block users temporarily to use Asterisk services ? Is defaultip and secret enought ? what u do to prevent this. tia
If they are using SIP devices you can just change the "secret" to some value they will not know, this should work at least for outgoing calls, not sure for incoming. Just tried this earlier and once I changed the secret I could no longer make calls. -- Start Your Own ISP! http://www.YourOwnISP.com ----- Original Message ----- From: <raptor@tvskat.net> To: <asterisk-users@lists.digium.com> Sent: Monday, October 25, 2004 4:47 AM Subject: [Asterisk-Users] protection> hi, > > how do u prevent unauthorized usage or block users temporarily to use > Asterisk services ? > Is defaultip and secret enought ? what u do to prevent this. > > tia > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users
More on the scenario. Public internet access? Usage from the LAN? Is your machine behind a NAT? Defaultip does nothing as far as protection as far as I know. You can use inkeys and RSA auth or also statements similar to [someiaxphone] type=friend host=dynamic secret=moofoo context=totalaccess notransfer=yes ;deny=0.0.0.0/0.0.0.0 ;permit=68.32.52.90/255.255.255.255 ;qualify=300 Efficient use of access-lists on layer 3 devices can mitigate most threats. Thanks, Steve stotaro@totarotechnologies.com ----- Original Message ----- From: <raptor@tvskat.net> To: <asterisk-users@lists.digium.com> Sent: Monday, October 25, 2004 5:47 AM Subject: [Asterisk-Users] protection> hi, > > how do u prevent unauthorized usage or block users temporarily to useAsterisk services ?> Is defaultip and secret enought ? what u do to prevent this. > > tia > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >