On Dec 26, 2007, at 8:02 AM, David Knell wrote: > Less wordily, any user can get any other user's calls by changing > their SIP username > to match that user's. How can they do that if auth calls is turned on? If you have blind reg on then sure someone could. /b