[VoiceOps] Preventing random SIP connections to handsets

Carlos Alvarez caalvarez at gmail.com
Fri Nov 20 15:23:54 EST 2015


That's the default for all the handsets, I believe.  There are various
options such as "accept only from proxy" or "only from registrar," but like
I said it varies so it could be more challenging to employ that.  Also in
our limited testing it seems like it may not have had the intended effect.
Possibly because NAT hides the original IP, but I don't know that for sure.

Most phones also have an option to force auth for incoming invites, which
we have not tested yet.



On Fri, Nov 20, 2015 at 1:21 PM, Alex Balashov <abalashov at evaristesys.com>
wrote:

> That said, it is baffling to me that phones accept INVITEs unchallenged
> from anywhere but $REGISTRAR_IP/$OUTBOUND_PROXY_IP.
>
>
> --
> Alex Balashov | Principal | Evariste Systems LLC
> 303 Perimeter Center North, Suite 300
> Atlanta, GA 30346
> United States
>
> Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct)
> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20151120/3c0c015d/attachment-0001.html>


More information about the VoiceOps mailing list