Tod Fitch wrote:
> On Dec 1, 2008, at 3:58 PM, Jose Colin wrote:
> 
>> HI. martin. I have seen that you said that if is SIP you should set
>> allowguest=no  so where does that command should be set ? in arnot
>> firewall or where ? i am insterested in put that extra protection an
>> havent seen where is the default yes
>>
>> On Sun, Nov 16, 2008 at 3:51 AM, Martin Rogers
>> <[EMAIL PROTECTED]> wrote:
>> If you are using SIP you should also be paranoid and set allowguest=no,
>> as this defaults to yes.
>>
>> Mart
> 
> In the default sip.conf is this line:
> ;allowguest=no            ; Allow or reject guest calls (default is yes)
> 
> But that brings up a question: Don't you need this to be the "yes" (the
> default) if you wish to terminate ENUM calls? And if you have the
> default SIP context only allow local extensions what would be the
> security issue?
> 
As I understand the behaviour of this setting, if you have thought
through the security implications of the default context then this
setting set =yes should not be a problem.  The reason I mentioned it is
that I think that a default of yes is dangerous if you are not aware of
it, and have not planned your default context accordingly.

Mart

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to [EMAIL 
PROTECTED]

Reply via email to