[Asterisk-Users] TFTP Server Facing the Internet

[Michael Welter]

Howard Lowndes wrote:
> On Thu, 2005-01-27 at 03:34, Michael Welter wrote:
> 
>>Since we're chatting about tftp servers...
>>
>>Let's say I have a new customer with Cisco 79xx phones, and he desires 
>>to SIP register on my Asterisk system.  I would have to provide the 
>>SIP<mac>.cnf and SIPDefault.cnf files on my tftp server for his phones. 
>>  These files would be world readable, which I don't want.
>>
>>Is the solution to put the tftp server behind the firewall and port 
>>redirect based on the customer's IP, or is there a better way of 
>>restricting access?
> 
> 
> TFTP on an open server is a definite no-no.  Port redirection is better
> _if_ you have a static IP - but what are you going to do about dynamic
> IPs.
> 
Yes, that's why I'm posting to this list.  I certainly don't want to 
have to track my customer's IP addresses.  Is there a better way?