Can any1 log into my *box from internet using softphone

can any1, from anywhere on the internet, log and can be assigned an extension into my *box using sip softphone if he provides correct info for sip registration.

is this possible…???

and can be done with sip.conf???

obviously, this is only possible if you offer unrestricted access to the ports required.

i set my Asterisk boxes up behind a firewall that only allow SIP connections from the ITSP subnet.

and it makes sense to use “secure” secrets in sip.conf … it’s not as if the user needs to enter them except when the phone/device/UA is being configured/installed.