[asterisk-dev] Security Request for discussion: Should sip.conf allowguest=yes be the default

[Tzafrir Cohen]

On Wed, Nov 18, 2009 at 08:07:20AM +1300, Alec Davis wrote:
> I've been pondering what has been suggested in this email since I sent the
> original request for discussion.
> 
> The idea is to default 'allowguest to 'local' using the following.
> 
> 'allowguest=local'
> 	only computers on the same subnet as asterisk, 'That magic moment is
> still preserved when first connecting to asterisk.

Where is that subnet defined? "localnet" or something more automatic?

> 'allowguest=no'
> 	A locked down system, where you definately don't want guest.
> 'allowguest=yes'
> 	You know what your doing, and guests are allowed.

-- 
               Tzafrir Cohen
icq#16849755              jabber:tzafrir.cohen at xorcom.com
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir