Asterisk is a huge pile of C code with lots of legacy crap. I wouldn't trust having it exposed to the Internet.