<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Step 1: Move everything to TCP (or better yet TLS). <br>
</p>
<p>Step 2: Use LetsEncrypt for free perpetual certificates. <br>
</p>
<p>Step 3: Profit (and smug superiority over UDP based competitors
battling nat issues). <br>
</p>
<p><br>
</p>
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 8/8/2018 10:43 AM, Carlos Alvarez
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAEu0Vi3VWAm1Th99k=bbidRYEHmEHpDbCeq741aYLSSqhA=+Qg@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<div dir="ltr">Do most of you have the phones authenticate
incoming calls? We haven't been, but occasionally find a router
that has unfiltered full cone NAT (Cisco) or that puts one phone
on 5060 with no filtering by IP. The result is that the phone
will start ringing at random as script kiddies hit the IP and
port 5060 trying to find servers to exploit. I don't see a
downside to changing to auth, but not having done it outside of
a few tests of a small number of phones, I figured I would ask.
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
VoiceOps mailing list
<a class="moz-txt-link-abbreviated" href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a>
<a class="moz-txt-link-freetext" href="https://puck.nether.net/mailman/listinfo/voiceops">https://puck.nether.net/mailman/listinfo/voiceops</a>
</pre>
</blockquote>
<br>
</body>
</html>