internal/external profiles
Hello, Why is it recommended to use separate profiles for internal and external SIP? This page: <http://wiki.freeswitch.org/wiki/External_profile> suggests it is because of NAT. However this page recommends using separate profiles even if NAT is not an issue: <http://wiki.freeswitch.org/wiki/Auto_NAT>: "NOTE: It is still recommended that you use a second profile for your SIP providers. The default conf/sip_profiles/external.xml is set up specifically for use with providers." However I am still left uncertain what this means. Not trying to criticize here, just trying to learn. Thanks. -- Brian May <brian@microcomaustralia.com.au>
On Tue, Feb 23, 2010 at 4:27 PM, Brian May <brian@microcomaustralia.com.au>wrote:
Hello,
Why is it recommended to use separate profiles for internal and external SIP?
This page: <http://wiki.freeswitch.org/wiki/External_profile> suggests it is because of NAT.
However this page recommends using separate profiles even if NAT is not an issue: <http://wiki.freeswitch.org/wiki/Auto_NAT>: "NOTE: It is still recommended that you use a second profile for your SIP providers. The default conf/sip_profiles/external.xml is set up specifically for use with providers."
However I am still left uncertain what this means.
Not trying to criticize here, just trying to learn.
No problem. Separating them has a few advantages: security, scalability, and readability. The first one on the list is definitely the most important. If you stuff everything in the internal profile it's easier to open yourself up to toll fraud. -MC
On 25 February 2010 03:18, Michael Collins <msc@freeswitch.org> wrote:
No problem. Separating them has a few advantages: security, scalability, and readability. The first one on the list is definitely the most important. If you stuff everything in the internal profile it's easier to open yourself up to toll fraud.
Hello, I am still confused as to how using the external profile can help reduce toll fraud. On my system both internal and external have: <param name="context" value="public"/> Also, what happens when freeswitch receives an anonymous connection? Are anonymous connections allowed or rejected? Where is that behaviour controlled? Thanks -- Brian May <brian@microcomaustralia.com.au>
participants (2)
-
Brian May
-
Michael Collins