<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
Hello everybody!<br><br> I'd like to heard from those with more experience in Security if the following configuration is a good attempt to prevent hack:<br><br>exten => CALLER,2,Set(header=${SIP_HEADER(User-Agent)})<br>exten => CALLER,3,NoOp(Cabecalho ${header})<br>exten => CALLER,4,GotoIf($["${header}"= "My User Agent"]?6:7)<br><br>Considering I have only one type of IP phone in my scenario.<br><br>I know, somebody with another IP phone will succeed in dial on my asterisk but I think it will limit at one only kind of IP phone.<br><br>My question is , if there are some way to break it and use any kind of User Agent despite this configuratio.<br><br><br>Att,<br>
<br>
Flavio Roberto Miranda<br>
MSN:flaviormiranda@hotmail.com<br>Skype: flaviormiranda </div></body>
</html>