On Thu, Aug 16, 2018 at 11:57:03AM +0200, Kevin Olbrich wrote:
Most examples show that Asterisk is deployed on the
same network as the
external interface of Kamailio (-> Asterisk exposed to the public network).
In our tests, this works much better but I have great security concerns
because this Asterisk instance itself does not need to be reachable from
external.
Having a public IP doesn't mean this IP is reachable externally. If this
is your concern (rightfully): firewall access to anything that doesn't
need to be able to access.