VoIP Mailing List Archives

[dk at donkelly.biz]

Shouldn’t the secast discussion be on the commercial list?

Note that their free version works for five simultaneous calls—then the price goes ‘way up.

--Don

(Top posting ‘cause that’s what’s already being done.)

From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-bounces@lists.digium.com] On Behalf Of motty cruz
Sent: Friday, April 04, 2014 10:37 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Asterisk 1.6

that sounds feasible, Thanks Michelle,






On Fri, Apr 4, 2014 at 8:25 AM, Michelle Dupuis <mdupuis@ocg.ca (mdupuis@ocg.ca)> wrote:
If you know your users are all from with your country, or state, or even city, you could restrict geographic access in your secast.conf file like this:

ruledefault=deny
ruleexceptions=NA:CA:Ontario:|NA:US:Michigan:Detroit|::Ohio:|NA



The above would:

- By default deny all source IP's anywhere in the world

- Let in only source IP's from:

1. North America (continent), Canada (country), Ontario (region)

2. North America (continent), USA (country), Michigan (region), Detroit (city)

3. Any region called 'Ohio' anywhere in the world (not sure why you would do that but fun example)

4. Anywhere in North America



So you can open up your system based solely on where you know your real users are located.



-=Michelle=-


From: asterisk-users-bounces@lists.digium.com (asterisk-users-bounces@lists.digium.com) <asterisk-users-bounces@lists.digium.com (asterisk-users-bounces@lists.digium.com)> on behalf of motty cruz <motty.cruz@gmail.com (motty.cruz@gmail.com)>
Sent: Friday, April 4, 2014 11:15 AM

To: Asterisk Users List
Subject: Re: [asterisk-users] Asterisk 1.6




Hello Ishfaq, outside users usually travel around the country and connect from different network, so it won't be possible to lock it down to specific IP.


Thanks for your support.



On Fri, Apr 4, 2014 at 8:03 AM, Ishfaq Malik <ish@pack-net.co.uk (ish@pack-net.co.uk)> wrote:


On 4 April 2014 15:22, motty cruz <motty.cruz@gmail.com (motty.cruz@gmail.com)> wrote:
thank you all for your support. I am using Linux, I only have about 7 users outside our home network. I will learn fail2ban and will use it accordingly.


again Thanks for your support.









Do the 7 users outside of your home network always connect from the same IP addresses? If so, you can just lock down your SIP port to those 7 IPs explicitly in your IPTables configuration.



Another option would be to change which port you're running SIP on.





--

[duncan at e-simple.co.nz]

Another option we like, but i depends on your preferences is to run them over openvpn. Works for Mac, Linux and Windows clients.

Since all out clients are under our control we use openvpn a lot and yealink and other phones have it built in so they can connect directly once initially setup


Cheers Duncan


On 5/04/2014, at 4:36 am, motty cruz <motty.cruz@gmail.com (motty.cruz@gmail.com)> wrote:

[motty.cruz at gmail.com]

that is definitely another options, thanks for the range of options provided, 

Thanks 



On Sat, Apr 5, 2014 at 4:51 PM, Duncan Turnbull <duncan@e-simple.co.nz (duncan@e-simple.co.nz)> wrote: