On Thu, Aug 16, 2018 at 11:57:03AM +0200, Kevin Olbrich wrote:
Most examples show that Asterisk is deployed on the same network as the external interface of Kamailio (-> Asterisk exposed to the public network). In our tests, this works much better but I have great security concerns because this Asterisk instance itself does not need to be reachable from external.
Having a public IP doesn't mean this IP is reachable externally. If this is your concern (rightfully): firewall access to anything that doesn't need to be able to access.