[asterisk-dev] Asterisk and multiple SIP registrations tothesame host

[Klaus Darilion]

Olle E. Johansson wrote:
> 18 dec 2009 kl. 20.55 skrev Klaus Darilion:
> 
>> Olle E. Johansson wrote:
>>> 16 dec 2009 kl. 16.57 skrev Nick Lewis:
>>> 
>>>>> Well, I strongly think we should work on this architecture.
>>>>> Hopefully
>>>> I'll get some time for it during christmas.
>>>> 
>>>> I do not want you to be deprived of a relaxing christmas but I
>>>> would be very grateful if you were able to do this
>>>> 
>>>> May I please request that any solution for type=service have
>>>> the following properties: - remove the need for a registration
>>>> string
>>> Absolutely. We need to kill "register=" once and for all.
>>> 
>>>> - still provide some "security" through ip checking
>>> We always have the ACLs. Surely you use them. ;-)
>> IMO there should be a default ACL to accept match incoming requests
>> to this peer only if it comes from the same IP as the registration
>> was sent to.
>> 
> That has to be selectable, not a default. If you register using
> NAPTR/SRV, you should accept requests from any of the servers in the
> SRV set.

I am fine with that too. But IMO there SHOULD be a default ACL which 
makes this new feature secure.

klaus