Re: TLS/SRTP

--===============0169437476==
Content-Type: multipart/alternative; boundary="000000000000c3acb106557aab03"

--000000000000c3acb106557aab03
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

maybe not for a local network, absolutely yes for a public one no matter
the acl/rule/firewall


El El mar, 30 jun 2026 a la(s) 12:57, asma.bouddyach--- via sr-users <
[email protected]> escribi=C3=B3:

> Hi all,
>
> My Kamailio SBC (in front of 3CX,)  currently runs SIP in clear text, no
> SRTP. Security is mainly IP-based ACLs:
>
> if ($si =3D=3D PBX_IP) {
>     route(FROM_PBX);
> if ($si =3D=3D ITSP_IP_IN || $si =3D=3D ITSP_IP_OUT) {
>     route(FROM_ITSP);
>
> What are the concrete risks of staying without TLS/SRTP in this setup, an=
d
> would you still recommend encryption given these ACLs already in place?
>
> Thanks,
> Asmaa  BOUDDYACH
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions --
> [email protected]
> To unsubscribe send an email to [email protected]
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
>

--000000000000c3acb106557aab03
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">maybe not for a local network, absolutely yes for a publi=
c one no matter the acl/rule/firewall=C2=A0</div><div dir=3D"auto"><br></di=
v><div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr=
" class=3D"gmail_attr">El El mar, 30 jun 2026 a la(s) 12:57, asma.bouddyach=
--- via sr-users &lt;<a href=3D"mailto:[email protected]">sr-user=
[email protected]</a>&gt; escribi=C3=B3:<br></div><blockquote class=3D"g=
mail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-l=
eft:1ex">Hi all,<br>
<br>
My Kamailio SBC (in front of 3CX,)=C2=A0 currently runs SIP in clear text, =
no SRTP. Security is mainly IP-based ACLs:<br>
<br>
if ($si =3D=3D PBX_IP) {<br>
=C2=A0 =C2=A0 route(FROM_PBX);<br>
if ($si =3D=3D ITSP_IP_IN || $si =3D=3D ITSP_IP_OUT) {<br>
=C2=A0 =C2=A0 route(FROM_ITSP);<br>
<br>
What are the concrete risks of staying without TLS/SRTP in this setup, and =
would you still recommend encryption given these ACLs already in place?<br>
<br>
Thanks,<br>
Asmaa=C2=A0 BOUDDYACH<br>
__________________________________________________________<br>
Kamailio - Users Mailing List - Non Commercial Discussions -- <a href=3D"ma=
ilto:[email protected]" target=3D"_blank">[email protected]=
.org</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]=
ilio.org" target=3D"_blank">[email protected]</a><br>
Important: keep the mailing list in the recipients, do not reply only to th=
e sender!<br>
</blockquote></div></div>

--000000000000c3acb106557aab03--

--===============0169437476==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!

--===============0169437476==--