Feb 27, 2012
Asterisk Security Best Practices
The purpose of this document is to define best practices when working with Asterisk in order to minimize possible security breaches and to provide tried examples in field deployments. This is a living document and is subject to change over time as best practices are defined.
Filtering Data: How to protect yourself from redial attacks
Proper Device Naming: Why to not use numbered extensions for devices
Secure Passwords: Secure passwords limit your risk to brute force attacks
Reducing Pattern Match Typos: Using the 'same' prefix, or using Goto()