VoIP Security: Difference between revisions

← Older edit

VoIP Security (view source)

Revision as of 09:02, 14 June 2023

715 bytes added , 14 June 2023

m

→‎IP Allow List (restrict access by IP)

AA-Andrew

autoreview, Bureaucrats, editor, Interface administrators, reviewer, Administrators

12,274

edits

Revision as of 15:57, 3 September 2017 (view source) Adsb (talk \| contribs) m (Minor grammar) ← Older edit		Latest revision as of 09:02, 14 June 2023 (view source) AA-Andrew (talk \| contribs) m (→‎IP Allow List (restrict access by IP))
(5 intermediate revisions by 2 users not shown)
See: [[VoIP Call Rate Limits]] == IP ~~Allow~~Access List (restrict access by IP) == IP ~~Lockdown~~Access List - a VoIP number can be given an IP address to which is only allowed to register (i.e. you can add the IP of your phone, and only that phone will be able to register) ~~On the Voiceless platform you~~You can specify the IP as a subnet in CIDR format, e.g. 192.0.2.0/29, and multiple IPs can be comma separated.▼ ~~[[File:ControlPages-VoIP-IPLockdown.png\|none\|frame\|IP Lockdown, comma separated etc.]]~~ ▲On the Voiceless platform you can specify the IP as a subnet in CIDR format, e.g. 192.0.2.0/29, and multiple IPs can be comma separated. Valid examples: ==Snom Phones== Snom has a page about securing their devices on their wiki: ~~http~~https://~~wiki~~service.snom.com/~~FAQ~~display/wiki/~~How_do_I_secure_my_phone~~How+do+I+secure+my+Snom+phone =Odd incoming calls that are not on the CDRs?= Solution: Firewall SIP as explained above. Also some equipment may support the disabling of calls being sent direct from the Internet. For example, Grandstream firmware often has a feature ''Allow Incoming SIP Messages from SIP Proxy Only'', which is worth using (unless you need to accept such calls). Your equipment may also support a feature whereby incoming INVITE messages are only accepted if they use the User ID which you used when registering with the SIP server, maybe named ''Check SIP User ID for incoming INVITE''. The SIP server will know this User ID, random SIP spammers will not. This User ID is ''not'' the Authentication Username (e.g. +442083xxxxxx), but what is often termed ''Username'' in equipment configuration (where you can set a Username and a Real Name, e.g. ''fred'' and ''Fred Bloggs'') which is used in SIP calls. [[File:aa-button.png\|link=http://aa.net.uk/telecoms.html\|Telecoms page on our main website]]