<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>Another option we like, but i depends on your preferences is to run them over openvpn. Works for Mac, Linux and Windows clients. <div><br></div><div>Since all out clients are under our control we use openvpn a lot and yealink and other phones have it built in so they can connect directly once initially setup</div><div><br></div><div>Cheers Duncan</div><div><br></div><div><div>On 5/04/2014, at 4:36 am, motty cruz <<a href="mailto:motty.cruz@gmail.com">motty.cruz@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">that sounds feasible, Thanks Michelle, <div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 4, 2014 at 8:25 AM, Michelle Dupuis <span dir="ltr"><<a href="mailto:mdupuis@ocg.ca" target="_blank">mdupuis@ocg.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto;">
<div>
<div style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif"><p>If you know your users are all from with your country, or state, or even city, you could restrict geographic access in your secast.conf file like this:<br>
</p><p><br>
</p><p>ruledefault=deny<br>
</p>
<div>ruleexceptions=NA:CA:Ontario:|<span style="font-size:12pt">NA:US:Michigan:Detroit|::Ohio:|NA</span></div>
<div><span style="font-size:12pt"><br>
</span></div>
<div><span style="font-size:12pt">The above would:</span></div>
<div><span style="font-size:12pt">- By default deny all source IP's anywhere in the world</span></div>
<div><span style="font-size:12pt">- Let in only source IP's from:</span></div>
<div><span style="font-size:12pt">1. North America (continent), Canada (country), Ontario (region)</span></div>
<div><span style="font-size:12pt">2. North America (continent), USA (country), Michigan (region), Detroit (city)</span></div>
<div><span style="font-size:12pt">3. Any region called 'Ohio' anywhere in the world (not sure why you would do that but fun example)</span></div>
<div><span style="font-size:12pt">4. Anywhere in North America</span></div>
<div><span style="font-size:12pt"><br>
</span></div>
<div><span style="font-size:12pt">So you can open up your system based solely on where you know your real users are located.</span></div>
<div><br>
</div><p>-=Michelle=-<br>
</p><p><br>
</p>
<div style="color:#282828">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt"><b>From:</b> <a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a> <<a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a>> on behalf of motty cruz <<a href="mailto:motty.cruz@gmail.com" target="_blank">motty.cruz@gmail.com</a>><br>
<b>Sent:</b> Friday, April 4, 2014 11:15 AM<div class=""><br>
<b>To:</b> Asterisk Users List<br>
<b>Subject:</b> Re: [asterisk-users] Asterisk 1.6</div></font>
<div> </div>
</div><div><div class="h5">
<div>
<div dir="ltr">Hello Ishfaq, outside users usually travel around the country and connect from different network, so it won't be possible to lock it down to specific IP.
<div><br>
</div>
<div>Thanks for your support. </div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Fri, Apr 4, 2014 at 8:03 AM, Ishfaq Malik <span dir="ltr">
<<a href="mailto:ish@pack-net.co.uk" target="_blank">ish@pack-net.co.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:#cccccc;border-left-style:solid;padding-left:1ex">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">
<div>On 4 April 2014 15:22, motty cruz <span dir="ltr"><<a href="mailto:motty.cruz@gmail.com" target="_blank">motty.cruz@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:#cccccc;border-left-style:solid;padding-left:1ex">
<div dir="ltr">thank you all for your support. I am using Linux, I only have about 7 users outside our home network. I will learn fail2ban and will use it accordingly.
<div><br>
</div>
<div>again Thanks for your support. </div>
</div>
<div>
<div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote"><br>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<div>Do the 7 users outside of your home network always connect from the same IP addresses? If so, you can just lock down your SIP port to those 7 IPs explicitly in your IPTables configuration.</div>
<div><br>
</div>
<div>Another option would be to change which port you're running SIP on. </div>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr">
<pre>Ishfaq Malik
Department: VOIP Support
Company: Packnet Limited
t: <a href="tel:%2B44%20%280%29845%20004%204994" value="+448450044994" target="_blank">+44 (0)845 004 4994</a>
f: <a href="tel:%2B44%20%280%29161%20660%209825" value="+441616609825" target="_blank">+44 (0)161 660 9825</a>
e: <a href="mailto:ish@pack-net.co.uk" target="_blank">ish@pack-net.co.uk</a>
w: <a href="http://www.pack-net.co.uk/" target="_blank">http://www.pack-net.co.uk</a>
Registered Address: PACKNET LIMITED, Duplex 2, Ducie House
37 Ducie Street
Manchester, M1 2JW
COMPANY REG NO. 04920552
</pre>
</div>
</div>
</div>
<br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com/" target="_blank">
http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</div></div></div>
</div>
</div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com/" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div>
-- <br>_____________________________________________________________________<br>-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com">http://www.api-digital.com</a> --<br>New to Asterisk? Join us for a live introductory webinar every Thurs:<br> <a href="http://www.asterisk.org/hello">http://www.asterisk.org/hello</a><br><br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a></blockquote></div><br></div></body></html>