A checklist for hardening an Asterisk PBX: PJSIP ACLs, fail2ban, TLS/SRTP, endpoint authentication, dialplan injection risks, inbound context separati...