PJSIP endpoint identify does not block INVITE from ip address that don't match

I had already thought this solutions of acl but the acl is active for the server, not for single endpoint.

I tried to load only the module for ip authentication and it works correctly, the INVITE message is rejected 401

When later also loads the user authentication module, the ip authentication stops working.

The module for authentication with user is prevalent on ip address matching.

In other words this means that the only way to authenticate an endpoint is through username and password.

I found dangerous that this issue is not said, I found casually this issue.otherwise I will configure all endpoit by address identify and worldwide can use my endpoints simply guessing the username !!!

All configuration samples speak that is possible to do authentication by matching ip address and not sayd that this does not work.

A this point with pjsip is not possible use endpoint with ip address authentication!!

Thanks for your help.

Best regards.

Stefano