1.8 Account Naming Best Practices

Asterisk Asterisk Support
1

I recently upgraded to 1.8 and was reading the sample Sip.conf and found the following in the Naming section:

; Don’t mix extensions with the names of the devices. Devices need a unique
; name. The device name is not used as phone numbers. Phone numbers are
; anything you declare as an extension in the dialplan (extensions.conf).

Since all my dialplans DO use the DID as the account name, can anyone shed some light on why this is so bad and needs to be ‘fixed’?

Thanks

Bill

2

  1. it makes you think that there is a one to one relationship between devices and extensions, which is over-restricting, and doesn’t even allow shared line appearances.

  2. Once an attacker has established one valid name, they can usually keep adding one to enumerate the others, so they are just left searching for weak passwords.

3

Makes sense

Thanks

Bill