[asterisk-dev] Security Request for discussion: Should sip.conf allowguest=yes be the default

[Jeff LaCoursiere]

On Thu, 12 Nov 2009, Atis Lezdins wrote:

> On Thu, Nov 12, 2009 at 8:34 PM, Tzafrir Cohen <tzafrir.cohen at xorcom.com> wrote:
>>
>> Please explain to me why exactly allowing guests is a bad thing. How can
>> I allow people to call me from the internet? Create a local account for
>> each and every one in my addressbook?
>>
>
> How about creating context "guest" or "public", and setting it as
> default in samples? That would make user to think much more before
> adding some code there.
>

That sounds like the most reasonable suggestion yet.

j