[asterisk-users] asterisk ip authentication

[Andrew Colin]

remove disallow completely

you are basically saying do not allow anything
then allow anything

so remove the disallow part and leave allow




Kind Regards

Andrew Colin
Technical Director
T:010 591 4358
C: 082 310 3007
andrew at vsave.co.za



On 7/29/2013 9:48 AM, james jan wrote:
> hi Andrew,
> here is my sip.conf
>
> [3333]
> host=x.x.x.x
> qualify=yes
> type=peer
> insecure=port,invite
> context=from-internal
> disallow=all
> allow=all
>
>
>
> On Mon, Jul 29, 2013 at 9:17 AM, Andrew Colin <andrew at vsave.co.za 
> <mailto:andrew at vsave.co.za>> wrote:
>
>     send me a copy of your sip config also make sure dissallow is
>     before allow.
>
>
>
>
>
>     Kind Regards
>
>     Andrew Colin
>     Technical Director
>     T:010 591 4358
>     C: 082 310 3007 <tel:310%203007>
>     andrew at vsave.co.za <mailto:andrew at vsave.co.za>
>
>
>
>     On 7/29/2013 1:07 AM, james jan wrote:
>>     hi all,
>>     i've changed allow=all and restarted service.
>>     but  still gives 488 Not acceptable here
>>     The softswitch sends codec g729.
>>     "core show translation" says codec g729 alsa installed.
>>
>>
>>
>>
>>     On Sun, Jul 28, 2013 at 10:11 PM, Andrew Colin
>>     <andrew at vsave.co.za <mailto:andrew at vsave.co.za>> wrote:
>>
>>         I just find it insecure because if someone does hack they can
>>         use any codec.
>>         I suppose not very insecure but I like to lock things down as
>>         much as possible.
>>
>>
>>
>>
>>
>>         On 7/28/2013 9:09 PM, Matt Behrens wrote:
>>>         On Jul 28, 2013, at 2:59 PM, Andrew Colin<andrew at vsave.co.za>  <mailto:andrew at vsave.co.za>  wrote:
>>>
>>>>         if you say allow=all it will work but thats not secure at all.
>>>         How is allow=all insecure?  I can see inefficient, but what would make that insecure eludes me.
>>>
>>>
>>>
>>>         --
>>>         _____________________________________________________________________
>>>         -- Bandwidth and Colocation Provided byhttp://www.api-digital.com  --
>>>         New to Asterisk? Join us for a live introductory webinar every Thurs:
>>>                         http://www.asterisk.org/hello
>>>
>>>         asterisk-users mailing list
>>>         To UNSUBSCRIBE or update options visit:
>>>             http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>>
>>         --
>>         _____________________________________________________________________
>>         -- Bandwidth and Colocation Provided by
>>         http://www.api-digital.com --
>>         New to Asterisk? Join us for a live introductory webinar
>>         every Thurs:
>>         http://www.asterisk.org/hello
>>
>>         asterisk-users mailing list
>>         To UNSUBSCRIBE or update options visit:
>>         http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>>
>>
>>
>>     --
>>     _____________________________________________________________________
>>     -- Bandwidth and Colocation Provided byhttp://www.api-digital.com  --
>>     New to Asterisk? Join us for a live introductory webinar every Thurs:
>>                     http://www.asterisk.org/hello
>>
>>     asterisk-users mailing list
>>     To UNSUBSCRIBE or update options visit:
>>         http://lists.digium.com/mailman/listinfo/asterisk-users
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20130729/515a82cc/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vsave logo 2.jpg
Type: image/jpeg
Size: 8235 bytes
Desc: not available
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20130729/515a82cc/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 8235 bytes
Desc: not available
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20130729/515a82cc/attachment.jpeg>