Hello all,
I'm pretty new to the SIP world and appreciate if somebody can help me out.
In the SerWeb login page I noticed a link "Have-My-Domain!", and it looks like that the result would be having something similar to email forwarding service. Suppose that I have my own domain (e.g. mydomain.com), and I have added an SRV record to it and pointed it to iptel's sip server. Then following the link I was able to create a new username (e.g. user01). Now based on what I've understood, whenever somebody calls the sip uri user01@mydomain.com my soft phone that is registered with the above account should ring (my soft phone is using user01 for username, mydomain.com for server and iptel.org for registerar and it seems that it is registered without any problem).
My questions:
1. What prevents others from impersonating a new username in my domain ? It seems that if somebody knows that mydomain.com has an SRV record pointed to iptel.org, can create another username (user02@mydomain.com) and use it without my knowledge, what is worse is that my DNS provider doesn't have any logging options for DNS requests, so I'll never find out about it.
2. In my account in iptel ( user01@mydomain.com ), there is another sip uri ( something like 123456@mydomain.com ), which I guess is supposed to be used by somebody who uses a device without alphabets (for example if somebody wants to call me via sipbroker gateways), I've already tried *478 - 123456 ( *478 is the code for iptel), but it doesn't work and it goes to voice mail, how can I use sipbroker to call user01@mydomain.com ?
Thanks a lot in advance and sorry for the long message ! Someone
Someone beneath the blue sky wrote:
- What prevents others from impersonating a new username in my
domain ? It seems that if somebody knows that mydomain.com has an SRV record pointed to iptel.org, can create another username (user02@mydomain.com) and use it without my knowledge, what is worse is that my DNS provider doesn't have any logging options for DNS requests, so I'll never find out about it.
I don't know about iptel.org, but I would presume that there is a mechanism that requires your approval if anyone creates addresses in your domain.
If you were thinking about just using an address without explicitely creating it first, like you usually do in Jabber, then this doesn't work with iptel.org. The address has to be created and will then have a password assigned to it. Without that password nobody can register for your domain.
At least that is how it should be. I am no user of that service so can't say for sure. It does have its own mailing list, though, I think.
Regards, Martin
-
Martin Hoffmann -
Someone beneath the blue sky