Sip trunk w/o registration, security

Asterisk Asterisk Support
1

Is this enough for Alice can dial any number via Bob, and nobody else can dial via this machine at all?

sip.conf:
[alice]
call-limit=2
type=peer
host=10.10.10.10
context=from_alice
disallow=all
allow=alaw
qualify=no
nat=no

[bob]
type=peer
host=10.10.10.40
qualify=yes
context=from_bob
disallow=all
allow=alaw
nat=no

extensions.conf:

[from_alice]
exten=>_.,1,Dial(SIP/bob/${EXTEN})

[from_bob]
exten=>_.,1,Hangup

2

Yes. As long as you don’t have a default context defined, although it is better to have allowguest=no, in the general section.

Also, you may be vulnerable to IP address spoofing. I haven’t looked at that in detail. I would, in any case, back this up with suitable anti-spoofing firewall rules.

3

Thanks!