-----Original Message----- From: Jan Janak [mailto:jan@iptel.org] Sent: Thursday, March 18, 2004 10:38 am To: Ticknor, Scott: DGSE Cc: serusers(a)lists.iptel.org Subject: Re: [Serusers] authentication recommnedations Yes, there is an explanation. The default configuration file authenticates REGISTERs only. If you want to authenticate calls (INVITEs) as well, then you have to modify the configuration file and insert additional authentication when INVITE is being processed. But be careful -- you cannot authenticate all INVITE messages because foreing users will be not able to call your subscribers (foreign users have no username and password on your server). You should check if the INVITE is coming from one of your subscribers and then authenticate. Jan.