Security Issues →

7.1 What are the authentication methods of VoIP connection between an originator and terminator?

BuySellMinutes softswitch defines where the call came from by IP address of TCP connection. Each given gateway belongs to one BuySellMinutes Member, so we can easily define who originated the call. In special cases we may assign a particular IP address in our softswitch to a particular Member. As a measure against false calls BuySellMinutes softswitch verifies the Access Token of the calls.

7.2 How can I prevent my gateways from incoming unauthorized traffic?

You may protect your network with a firewall. Configure the access lists of your firewall in the following way: Deny TCP (at least on ports 1720 and 5060) to/from all external hosts except BuySellMinutes softswitch; Permit UDP (ports higher than 1024, except 5060) to/from all external hosts. Please see a configuration example. Please note that BuySellMinutes takes all the responsibility for the traffic authorized by BuySellMinutes softswitch. At the same time, BuySellMinutes does not take any responsibility for traffic whose signaling has come from the sources other than BuySellMinutes softswitch.