[asterisk-users] Restrict SIP registration to one ip address only?

Stefan Gofferje list-asterisk-users at gofferje.homelinux.org
Thu Sep 18 09:56:12 CDT 2008


Remco Barendse schrieb:
 > Suprising that this feature isn't used much, i would suspect that many
> asterisk installations (including mine) have very simple (short) extension 
> numbers which makes brute forcing them rather easy.

Extension numbers and SIP account basically have nothing to do with each
other. If you name your SIP accounts after the respective extension
number, you have a security issue in your design which you should solve
first!

A SIP peer definition can be like
[Remcossoftclientathislaptop]
type=friend
secret=verysecretpassword
...

And then in the diaplan you just do something like

[internalcontext]
exten => 10,1,Dial(SIP/Remcossoftclientathislaptop,30)
exten => 10,2,Hangup()
...

So, the username for you SIP client would be
"Remcossoftclientathislaptop" while the dialled extension would be "10".


Terve,
Stefan

-- 
Last words of a stormchaser:
"Where is that rotation on the radar?!"




More information about the asterisk-users mailing list