[Asterisk-Users] strange SIP authentication/authorization behaviour

[asterisk at lists.styx.org]

On Mon, Nov 24, 2003 at 06:42:12PM +0200, Anton Yurchenko wrote:
> When I have an ip hardphone username setup in my sip.conf :

<snip>

> and this user has a wrong password then calls are denied, but when I 
> just change the userID on the phone to a nonexistant for example 110, 
> the calls go through !

(anonymous) sip calls that don't have a peer defined in sip.conf
get sent to the default context (defined in the [general]
section of sip.conf, and 'default' by default)

if you don't want this, change the 'context=' line in sip.conf to
some context that has only the extensions that unknown users are
allowed to call, maybe something like

[anonymous]
exten => _.,1,Congestion

in extensions.conf and

[general]
context=anonymous

in sip.conf

-w

-- 
/~\  The ASCII Ribbon Campaign   | NO MATTER HOW MUCH DRIVING EXPERIENCE YOU
\ /    No HTML/RTF in email      | HAVE, YOU CANNOT IGNORE THE LAWS OF PHYSICS
 X     No Word docs in email     | WITHOUT RUNNING A CONSIDERABLE RISK.
/ \  Respect for open standards  |     -- Société de l'assurance automibile du
                                 |        Québec, "Driving a Passenger Vehicle"