<div dir="ltr">Paul,<div><br></div><div>Registration has nothing to do with placing outbound calls, it <i>only</i> affects how FS delivers inbound calls to a registered user. Whether or not FS will challenge incoming invites for credentials depends on the values of "auth-calls," "auth-all-packets," "accept-blind-auth" and various ACLs.</div><div><br></div><div>For example, it may be the case that you have a proxy in front of FS that results in FS actually seeing the internal IP address, combined with an ACL that allows FS to trust any calls coming from the internal network.</div><div><br></div><div>I think it will be hard to help more without seeing your profile configuration.</div><div><br></div><div>Best,</div><div>Colin</div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Aug 3, 2016 at 9:26 AM Paul Zillmann <<a href="mailto:mail@paulzillmann.de">mail@paulzillmann.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
due to an open firewall some robots could get into my network and start<br>
some calls (11.000!) over my PSTN gateway.<br>
I looked through the data and those robots didn't registered themselve,<br>
they just placed the call on the internal profile and succesfully got<br>
through the dialplan.<br>
How is it possible that they can make calls on the internal profile<br>
(Port 5060) without registration and is there a variable for sofia to<br>
don't allow those calls.<br>
Is there anything else I can do appart from checking the source IP<br>
Address in the dialplan?<br>
<br>
Thanks,<br>
Paul<br>
<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div>