[Asterisk-bsd] Securing Asterisk with a DID

[Tim St. Pierre]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You mean, you didn't before?

I wouldn't really call them a terrorist if there was nothing stopping them from dialing through your
system.  Oppertunist, unscrupulous perhaps.  Terrorists generally try to cause mass destruction or
panic in a large group of people.

At any rate, it isn't hard.

You could use vm_authenticate, which will authenticate based on the voice mail password, or just
plain authenticate.

You should also do some pattern matching on the numbers that are input, before the call is sent back
out.  Do you really need to call anywhere in the world, or just certain places?  You could restrict
the destinations, which might save you if someone figures your password out.

- -Tim

Frank Griffith wrote:
> I have a DID with a VOIP provider which has worked pretty well. Until
> some terrorist of some one of similar liking discovered it and used up
> all my credits calling Israel, Morroco and Cuba. I would like to find
> out how to be able to setup this DID so that only I could call into it
> and access my service for making outside calls. I could disable this all
> together but then that defeats my reason for needing the DID in the
> first place. Is there a way to perhaps password protect this, that is
> when I call in I have to enter a password before being allowed to dial out?
> 
> 

- --
Tim St. Pierre
IP Voice technician
Communicate Freely
1-877-291-8647 x5101
sip:5101 at communicatefreely.net
tim at communicatefreely.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iJwEAQECAAYFAkx7BDoACgkQipVy80Kcc6voswP8DsAyhk4DN4AXSGvDP3fg8pUl
DVM/oUJn2EhWbJPVn8FmLm1E1f3rmtNcAbVVgu69PKRVmyFyM63QWyePRNNQOhVM
P/d11vW9yqdN8H88cFqixekUgF1z/MQnHsriACSCDXV1VUZlbCIC6iP+ZzrYUYXF
y2ChiJba32Bs5vQuTwo=
=K/xS
-----END PGP SIGNATURE-----