- use permissions module to have the equivalent of a white list, a list
of IPs that are trusted. This module is used together with db_text and
the list of IPs and IP ranges will be specified in the address dbtext
file.
- drop requests that have no To domain or a To domain consisting of an
IP.
- reply to Options from outside only if the RURI domain is not IP.
- reject Register to IP domain
- check for brute force attack - allow only two consecutive attempts to
authenticate. If both failed block the account for 2 minutes.
- distribute also Register and Subscribes to groups 20 and 30
respectively
- for Invites introduce a backup group 2 to be used in case in group 1
there are less than 3 available gateways