[asterisk-users] Replacing Skype with Asterisk Peering Servers - and Security

[Siju George]

Hi,

I have successfully configured two OpenBSD ( 4.2 & 4.0 ) Servers to do
IXA2 peering on two remote Sites.
Now asterisk users on Site1 can talk to users on Site2.

I just would like to know the following details.

1)

Currently I have allowed all in coming traffic from "Site1 Public IP
Address" on Site2 Server and vice versa.
Is that really required? Is it possible to narrow down the access to
port 4569 or a fewer no. of ports? What about udp traffic?

2)

Is there a Soft Phone available ( Free or otherwise ) that will allow
users to chat with each other too after calling them just like in
Skype. Also the phone should support call conferencing between
multiple users. Linux support is desirable but not a mandatory
requirement. It will help me run the same phone with Linux Emulation
on my OpenBSD Desktop.

3)

Is it possible to do video conferencing with Asterisk?

4)

This is a very important one.
What are the security ramifications of peering two Asterisk servers on
remote locations and sending the VOIP traffice through the internet
using IAX2 ? Can this traffic be sniffed and the Voice be captured and
heard by any third party?
If so is ther a way to prevent it? Is there a way in asterisk to do
that or should i be using some VPN technique like IPSEC between the
two end points to encrypt VOIP traffic?

Thank you so much :-)

Kind Regards

Siju