[asterisk-bugs] [Asterisk 0013951]: Sip Registration for Extensions to allow only private IP address, while Trunks allowed from outside Internet

[Asterisk Bug Tracker]

The following issue has been RESOLVED. 
====================================================================== 
http://bugs.digium.com/view.php?id=13951 
====================================================================== 
Reported By:                jperry999
Assigned To:                qwell
====================================================================== 
Project:                    Asterisk
Issue ID:                   13951
Category:                   Channels/chan_sip/Registration
Reproducibility:            N/A
Severity:                   feature
Priority:                   normal
Status:                     resolved
Asterisk Version:           1.4.18 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
Resolution:                 no change required
Fixed in Version:           
====================================================================== 
Date Submitted:             2008-11-22 13:28 CST
Last Modified:              2008-11-24 14:46 CST
====================================================================== 
Summary:                    Sip Registration for Extensions to allow only
private IP address, while Trunks allowed from outside Internet
Description: 
Having a phone system compromised hurts the whole community; making it easy
to be more secure will help everyone.

I would like a feature to allow SIP Registration for Extensions only from
private IP addresses (e.g. 192.168.x.x), but allow Trunk SIP registration
from the outside Internet.

That way, anyone registering from the outside Internet would only have
access for an outside incoming call; not like an extension where they have
rights to make outgoing calls to their heart's content.  Outside Internet
IP addresses would be blocked at a very fundamental level and thus could
not even attempt thousands of Register attempts to discover passwords.


====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2008-11-24 14:46 qwell          Status                   new => resolved     
2008-11-24 14:46 qwell          Resolution               open => no change
required
2008-11-24 14:46 qwell          Assigned To               => qwell           
======================================================================