[asterisk-bugs] [Asterisk 0013951]: Sip Registration for Extensions to allow only private IP address, while Trunks allowed from outside Internet

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13951 
====================================================================== 
Reported By:                jperry999
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13951
Category:                   Channels/chan_sip/Registration
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.18 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-11-22 13:28 CST
Last Modified:              2008-11-22 17:54 CST
====================================================================== 
Summary:                    Sip Registration for Extensions to allow only
private IP address, while Trunks allowed from outside Internet
Description: 
Having a phone system compromised hurts the whole community; making it easy
to be more secure will help everyone.

I would like a feature to allow SIP Registration for Extensions only from
private IP addresses (e.g. 192.168.x.x), but allow Trunk SIP registration
from the outside Internet.

That way, anyone registering from the outside Internet would only have
access for an outside incoming call; not like an extension where they have
rights to make outgoing calls to their heart's content.  Outside Internet
IP addresses would be blocked at a very fundamental level and thus could
not even attempt thousands of Register attempts to discover passwords.


====================================================================== 

---------------------------------------------------------------------- 
 (0095331) dimitripietro (reporter) - 2008-11-22 17:54
 http://bugs.digium.com/view.php?id=13951#c95331 
---------------------------------------------------------------------- 
Just use

permit= and deny= in your sip.conf 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-11-22 17:54 dimitripietro  Note Added: 0095331                          
======================================================================