[Asterisk-Users] RE: SIP permit/deny

[Kevin P. Fleming]

Douglas Garstang wrote:

> [a00090101]
> type=friend
> context=Company1
> username=a00090101
> ;secret=180
> ;insecure=very
> host=dynamic
> mailbox=company1 at vmusers
> deny=0.0.0.0/0.0.0.0
> permit=192.168.10.4/255.255.255.0
> permit=192.168.10.5/255.255.255.0

These lines are duplicates; you have asked Asterisk to look at only the 
first 24 bits of the host's IP address for matching purposes, so any 
host on 192.168.10.x will be able to send you SIP signaling.