[asterisk-bugs] [Asterisk 0013951]: Sip Registration for Extensions to allow only private IP address, while Trunks allowed from outside Internet

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13951 
====================================================================== 
Reported By:                jperry999
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   13951
Category:                   Channels/chan_sip/Registration
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.18 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-11-22 13:28 CST
Last Modified:              2008-11-23 11:50 CST
====================================================================== 
Summary:                    Sip Registration for Extensions to allow only
private IP address, while Trunks allowed from outside Internet
Description: 
Having a phone system compromised hurts the whole community; making it easy
to be more secure will help everyone.

I would like a feature to allow SIP Registration for Extensions only from
private IP addresses (e.g. 192.168.x.x), but allow Trunk SIP registration
from the outside Internet.

That way, anyone registering from the outside Internet would only have
access for an outside incoming call; not like an extension where they have
rights to make outgoing calls to their heart's content.  Outside Internet
IP addresses would be blocked at a very fundamental level and thus could
not even attempt thousands of Register attempts to discover passwords.


====================================================================== 

---------------------------------------------------------------------- 
 (0095344) jperry999 (reporter) - 2008-11-23 11:50
 http://bugs.digium.com/view.php?id=13951#c95344 
---------------------------------------------------------------------- 
* I looked in the "The Asterisk Handbook, Version 2, Last Edit Date:
3/30/03", in the sip.conf (around page 56), it does NOT list permit/deny as
allowed settings. (They are available for IAX)

* I now looked in O'Reily's Asterisk book (2nd Edition), and there around
page 98, for sip.conf it does list "permit/deny".

* My version of FreePBX (2.4.0) does NOT have these settings available in
the Extension page.  So it looks like I should make this suggestion for
FreePBX developer forum.

In summary, this seems to be a documentation and FreePBX issue.  Thank you
for point out the solution in Asterisk. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-11-23 11:50 jperry999      Note Added: 0095344                          
======================================================================