You can use static IP instead of the password, or hard code it in addition to the password. But what I think you really want for the registration is "SIPS" via TLS/SSL: http://wiki.freeswitch.org/wiki/Tls Actually, this is only to secure it against a registration being sniffed... which already uses a hash to not send the password in plain text (but can still be stolen via MITM, e.g. on public wifi). Do you just want fail2ban to prevent brute forcing the passwords? http://wiki.freeswitch.org/wiki/Fail2ban -Avi On Thu, Nov 3, 2011 at 9:05 PM, Tamer Higazi <th982a@googlemail.com> wrote:
Hi! I am interested to know if there is a way to secure the registration against account hacking.
for example, I would create an SIP Account server side, there would be the possibility that only users with the static IP-Address could login to the assigned account. Is there one other way like kerberos ticket authentication or public secret key with ipsec?!
For any advise I would thank you
Tamer
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org