You can use static IP instead of the password, or hard code it in addition to the password.

But what I think you really want for the registration is "SIPS" via TLS/SSL: http://wiki.freeswitch.org/wiki/Tls

Actually, this is only to secure it against a registration being sniffed... which already uses a hash to not send the password in plain text (but can still be stolen via MITM, e.g. on public wifi).

Do you just want fail2ban to prevent brute forcing the passwords?

http://wiki.freeswitch.org/wiki/Fail2ban

-Avi

On Thu, Nov 3, 2011 at 9:05 PM, Tamer Higazi <th982a@googlemail.com> wrote:

Hi!
I am interested to know if there is a way to secure the registration
against account hacking.

for example, I would create an SIP Account server side, there would be
the possibility that only users with the static IP-Address could login
to the assigned account. Is there one other way like kerberos ticket
authentication or public secret key with ipsec?!

For any advise I would thank you

Tamer

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org