[asterisk-users] allowguest defaults to yes for SIP

[Matt Riddell]

On 13/11/09 3:59 AM, Danny Nicholas wrote:
> Without the allowguest=no, Asterisk doesn't put up any defense against an
> unauthorized guest.  You still have NAT/Firewall/IPTABLE "defenses", for
> what they are worth.  The trick is to get what you need without allowing
> what you don't want.

A slight clarification - I wouldn't say it's defences.

By default these calls are sent to the default context (which should not 
have the capability to make calls other than test the system).

So, yes you are allowing unauthenticated calls, but to the echo test etc.

-- 
Cheers,

Matt Riddell
Director
_______________________________________________

http://www.venturevoip.com/news.php (Daily Asterisk News)
http://www.venturevoip.com/st.php (SmoothTorque Predictive Dialer)
http://www.venturevoip.com/c3.php (ConduIT3 PABX Systems)