[asterisk-users] Being attacked by an Amazon EC2 ...

[Philipp von Klitzing]

Hi!

> My phones (SNOMs) all are on the same LAN within a 192.168.X.X adress
> range. I wonder if everything would become a little bit more secure if
> define them with "host=192.168.X.X" in sip.conf instead of
> "host=dynamic". I tried it as a quick shot but it didn't work as they
> still try to register. Does someone know if this was possible and
> where/how to configure it on the snom side? 

Unfortunately you cannot tell the SNOM to not register for an active 
identity - at least not in the web UI. :-(

Instead use permit/deny in sip.conf for your SIP clients, and most 
importantly: Use strong (and long) passwords.

Philipp