[Freeswitch-users] Your Security Best Practices

[Anthony Minessale]

We have some parameters to disable some commonly abused features in a
carrier env.

in the sofia profile

set manage-presence to false

If you are not providing registration or client transfers disable them
completely
set disable-transfer to true
set disable-register to true


And register for ClueCon where someone will probably give a talk on VoIP
security!



2010/6/15 João Mesquita <jmesquita at freeswitch.org>

> I believe it is nice to say as well that most small transit carriers see
> the bypass media as a commercial threat since they will disclose in part of
> the packet to which IP address they are actually terminating the call to.
>
> I've been through this with lots of carriers that do nothing but LCR dips
> and transit.
>
> JM
>
>
>
> On Tue, Jun 15, 2010 at 6:11 PM, Brian West <brian at freeswitch.org> wrote:
>
>> We have bypass media.
>>
>> /b
>>
>> On Jun 15, 2010, at 4:01 PM, Code Ghar wrote:
>>
>> > Let me put it this way: of more than 40 carriers I work with, only six
>> have some sort of problem if they see re-invite. Some of the bigger names
>> most people recognize all support re-invite (and some even prefer it): AT&T,
>> Qwest, and Verizon, among others.
>> >
>> > Let me clarify when I say re-invite. We are basically talking about
>> keeping yourself in the signaling path but once the call is answered to
>> invite your ingress and egress carriers to use each others' media IP instead
>> of your media IP. This way you don't have to deal with media once call is
>> connected.
>>
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>


-- 
Anthony Minessale II

FreeSWITCH http://www.freeswitch.org/
ClueCon http://www.cluecon.com/
Twitter: http://twitter.com/FreeSWITCH_wire

AIM: anthm
MSN:anthony_minessale at hotmail.com <MSN%3Aanthony_minessale at hotmail.com>
GTALK/JABBER/PAYPAL:anthony.minessale at gmail.com<PAYPAL%3Aanthony.minessale at gmail.com>
IRC: irc.freenode.net #freeswitch

FreeSWITCH Developer Conference
sip:888 at conference.freeswitch.org <sip%3A888 at conference.freeswitch.org>
googletalk:conf+888 at conference.freeswitch.org<googletalk%3Aconf%2B888 at conference.freeswitch.org>
pstn:+19193869900
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100615/1c40b5c9/attachment-0001.html