Hi,<br><br><br>I would recommend using a third party solution as SIPAssure Firewall from Borderware, Ingate or Intertex.<br><br>Borderware SIPAssure for example also comes with a Session Border Controller, and allows you to encrypt internal and external calls with snom phones. As well as it protects your Asterisk from DoS attacks.
<br><br><br>Cheers<br><br>Tim Koehler<br><br><div><span class="gmail_quote">On 12/22/06, <b class="gmail_sendername"><a href="mailto:asterisk@sipspain.com">asterisk@sipspain.com</a></b> <<a href="mailto:asterisk@sipspain.com">
asterisk@sipspain.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><font face="Sans Serif predeterminado,Verdana,Arial,Helvetica,sans-serif" size="2">
<p style="margin: 0px;">One of my customers has a strong requeriment to enforce security on his new VoIP system, and I was thinking about using <span id="st" name="st" class="st">SNOM</span> 320 phones (that already have support for SRTP / TLS for security issues under VoIP)
</p><p style="margin: 0px;"> </p><p style="margin: 0px;">However, as far as I heard, support for SRTP / TLS to ensure a secure VoIP enviroment is not yet finished on <span id="st" name="st" class="st">Asterisk</span>. </p>
<p style="margin: 0px;"> </p><p style="margin: 0px;">For example, under <font face="Helv" size="2"><a href="http://www.voip-info.org/tiki-index.php?page=Asterisk+encryption" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://www.voip-info.org/tiki-index.php?page=<span id="st" name="st" class="st">Asterisk</span>+encryption</a> I observed this note: </font><font face="Helv" size="2"><font face="Tms Rmn">"With the missing TLS support in
<span id="st" name="st" class="st">Asterisk</span> could we work around by using OpenSER with TLS in front of <span id="st" name="st" class="st">Asterisk</span>, and then let <span id="st" name="st" class="st">Asterisk</span>
handle SRTP? "</font></font></p><p style="margin: 0px;"><font face="Helv" size="2"><font face="Tms Rmn"><font face="Sans Serif predeterminado,Verdana,Arial,Helvetica,sans-serif"></font></font></font> </p><p style="margin: 0px;">
<font face="Helv" size="2"><font face="Tms Rmn"><font face="Sans Serif predeterminado,Verdana,Arial,Helvetica,sans-serif">Is that information old ? Does current <span id="st" name="st" class="st">Asterisk</span> releases included support for both SRTP/TLS ? If not... Which approach do you suggest me for this customer ?
</font></font></font></p><p style="margin: 0px;"> </p><p style="margin: 0px;">ths foryour info and help<font face="Helv" size="2"><font face="Tms Rmn"></font></font></p></font><br>_______________________________________________
<br>--Bandwidth and Colocation provided by <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://Easynews.com" target="_blank">Easynews.com</a> --<br><br><span id="st" name="st" class="st">asterisk</span>
-<span id="st" name="st" class="st">biz</span> mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://lists.digium.com/mailman/listinfo/asterisk-biz" target="_blank">
http://lists.digium.com/mailman/listinfo/<span id="st" name="st" class="st">asterisk</span>-<span id="st" name="st" class="st">biz</span></a><br><br></blockquote></div><br><br clear="all"><br>-- <br>---------------------------------------------------
<br>snom technology AG<br><br>Tim Koehler <br>Partner Manager