Seven Steps to Better SIP Security with Asterisk

In case any of you were wondering why there has been a fairly notable upswing in the attacks happening on SIP endpoints, the answer is “script kiddies.” In the last few months, a number of new tools have made it easy for knuckle-draggers to attack and defraud SIP endpoints, Asterisk-based systems included. There are easily-available tools that scan networks looking for SIP hosts, and then scan hosts looking for valid extensions, and then scan valid extensions looking for passwords.


You can take steps, NOW, to eliminate many of these problems. I think the community is interested in coming up with an integrated Asterisk-based solution that is much wider in scope for dynamic protection (community-shared blacklists is the current thinking) but that doesn’t mean you should wait for some new tool to defend your systems. You can IMMEDIATELY take fairly common-sense measures to protect your Asterisk server from the bulk of the scans and attacks that are on the increase. The methods and tools for protection already exists – just apply them, and you’ll be able to sleep more soundly at night.

Seven Easy Steps to Better SIP Security on Asterisk:

1) Don’t accept SIP authentication requests from all IP addresses. Use the “permit=” and “deny=” lines in sip.conf to only allow a reasonable subset of IP addresess to reach each listed extension/user in your sip.conf file. Even if you accept inbound calls from “anywhere” (via [default]) don’t let those users reach authenticated elements! Contiued …

Related Posts

Use K3b and Audacity to convert an 8-CD audiobook to an Ogg file This tutorial presents a step-by-step guide on how I used K3b and Audacity to convert an eight (8) CD audiobook to a single Ogg file. As a bonus, the ...
How to access your Windows 10 files from Linux on a dual-boot system This post shows how to access your Windows 10 files from the Linux side of a dual-boot system between your favorite Linux distribution and Windows 10....
Tips for installing a Linux distribution on an external hard drive Installing a Linux distribution on an external hard drive should be easy and once installed, you should have no problem booting it from any computer. ...
Now that Kaptan has been ported, YALI’s waiting Borrowing code or programs written by others is an accepted practice in the Free Software community. It is perfectly legal, being one of the core prin...
Install Cinnamon 1.6 in Ubuntu 12.04 LTS Alternate titles: How to install Cinnamon desktop in Ubuntu 12.04 Precise Pangolin; how to install Cinnamon desktop 1.6 in Ubuntu 12.04 LTS. Cinnam...
GPT disk partitioning guide for Chakra 2011.4 GPT is an alternate disk partition table scheme that solves two issues associated with the MBR partition table scheme. It allows the configuration of ...

We Recommend These Vendors and Free Offers

ContainerizeThis 2016 is a free, 2-day conference for all things containers and big data. Featured, will be presentations and free, hands-on workshops. Learn more at ContainerizeThis.com

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).

Deploy an SSD Cloud server in 55 seconds on DigitalOcean. Built for developers and starting at $5:00/month (20 GB SSD, 512 MB of RAM).

Want to become an expert ethical hacker and penetration tester? Request your free video training course of Online Penetration Testing and Ethical Hacking

Whether you're new to Linux or are a Linux guru, you can learn a lot more about the Linux kernel by requesting your free ebook of Linux Kernel In A Nutshell.


Leave a Comment

Your email address will not be published. Required fields are marked *

*