[asterisk-users] Asterisk Security

[Todd Reese]

Hi All,

Coming in to day, the logs on the asterisk server showed several entries 
such as:

[Apr  4 15:25:16] NOTICE[9280]: chan_sip.c:14627 handle_request_invite: 
Call from '' to extension '9810380487965419' rejected because extension 
not found.

This has gotten me to thinking about security of this box.

1. Currently the box sits behind a firewall with iax and sip ports 
pointing to it for the ip phones that are offsite.  There isn't any 
other access through the firewall to this box.
2. All devices have an extension assigned to them in sip.conf and 
extensions.conf.  i.e. supra ATA, Grandstream GXP-2000
3. The box is fed via Les.net and Voicepluse.  All other feeds are 
shutoff when not active.

I'm looking for ideas to tighten up on the security so that this won't 
happen again.

TIA,

Todd Reese