[general]
udpbindaddr=0.0.0.0:5060
tcpenable=yes
tcpbindaddr=0.0.0.0:5060
transport=tcp,udp,tls

context=alien-call
language=en

disallow=all
allow=gsm
allow=alaw
allow=ulaw

srvlookup=no

minexpiry=0
maxexpiry=0

; ################################################################################
tlsenable=yes                   ; Enable server for incoming TLS (secure) connections (default is no)
tlsbindaddr=0.0.0.0:5061  ; IP address for TLS server to bind to (0.0.0.0) binds to all interfaces)
                                ; Optionally add a port number, 192.168.1.1:5063 (default is port 5061)
                                ; Remember that the IP address must match the common name (hostname) in the
                                ; certificate, so you don't want to bind a TLS socket to multiple IP addresses.
                                ; For details how to construct a certificate for SIP see
                                ; http://tools.ietf.org/html/draft-ietf-sip-domain-certs
tlscertfile=/etc/asterisk/keys/asterisk.pem ; Certificate file (*.pem format only) to use for TLS connections
tlscafile=/etc/asterisk/keys/ca.crt
tlscipher=TLSv1.2:!kRSA:!aNULL:!DSS:!AES128
tlsverifyclient=yes
tlsdisablesessionticket=yes

nat=force_rport,comedia
directmedia=no
