The attacks never (well hardly ever 
) come from your trunk, allow inbound trunks as your vsp requires or you just won’t get calls.
As to security, maybe a recent post here ( you should try reading them posts, some might be useful to you 
there is a convenient search box on this site)