<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>The latest version doesn't relay to other sip servers is
authentication is not enabled. So practically a default kamailio
installation can be used to call only between users that register
to that instance. I think is fair enough from security vs
easy-to-start balance.<br>
</p>
<p>User authentication is not enabled because depends on a database
backend, and that is a choice of people installing it. Maybe we
can add an installation wizard somewhere (maybe in kamcli) that
can be run and allows users to select some of the options inactive
(the defined feature) in the default configuration file and
updates the kamailio.cfg to enable them (add the corresponding
#!define tokens).</p>
<p>And again, if someone here has ideas about what we should add in
the default config file, security related or something else, just
propose here.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 13.12.18 18:46, Sergiu Pojoga wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAJZsGCmW=22rvEgEpC97zgUQxPwcuvCDyCBpUcYFb8PCqnCNbw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">I see, then it's false alarm. Just wanted to make
sure my favorite OS doesn't loose security merit points because
of a potential flaw in one of its packages.
<div><br>
</div>
<div>Cheers,</div>
<div>--Sergiu</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Thu, Dec 13, 2018 at 2:46 AM Daniel-Constantin
Mierla <<a href="mailto:miconda@gmail.com"
moz-do-not-send="true">miconda@gmail.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF">
<p>That is the default configuration file, allowing to
register and make calls between users.</p>
<p>Kamailio by default (with empty routing block) doesn't do
anything. So it doesn't route out the request, nor sends a
reply.</p>
<p>It is like this from the early phase of SIP Express
Router, if people feel to change it in some way, just
propose here for discussions.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="gmail-m_-8532151932247334410moz-cite-prefix">On
12.12.18 22:35, Sergiu Pojoga wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Did anyone notice that when installing
Kamailio from FreeBSD package, by default, it accepts
registration with whatever account credentials?
<div><br>
</div>
<div>Not sure if it's like that with other OS packages
(usually I install it from source), but this behavior
kind of doesn't go with the popular saying that
Kamailio by default "does nothing", lol.</div>
<div><br>
</div>
<div>Regards,</div>
<div>--Sergiu</div>
</div>
<br>
<fieldset
class="gmail-m_-8532151932247334410mimeAttachmentHeader"></fieldset>
<pre class="gmail-m_-8532151932247334410moz-quote-pre">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="gmail-m_-8532151932247334410moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org" target="_blank" moz-do-not-send="true">sr-users@lists.kamailio.org</a>
<a class="gmail-m_-8532151932247334410moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank" moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="gmail-m_-8532151932247334410moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="gmail-m_-8532151932247334410moz-txt-link-abbreviated" href="http://www.asipto.com" target="_blank" moz-do-not-send="true">www.asipto.com</a>
<a class="gmail-m_-8532151932247334410moz-txt-link-abbreviated" href="http://www.twitter.com/miconda" target="_blank" moz-do-not-send="true">www.twitter.com/miconda</a> -- <a class="gmail-m_-8532151932247334410moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda" target="_blank" moz-do-not-send="true">www.linkedin.com/in/miconda</a>
Kamailio World Conference - May 6-8, 2019 -- <a class="gmail-m_-8532151932247334410moz-txt-link-abbreviated" href="http://www.kamailioworld.com" target="_blank" moz-do-not-send="true">www.kamailioworld.com</a>
Kamailio Advanced Training -- <a class="gmail-m_-8532151932247334410moz-txt-link-abbreviated" href="http://www.asipto.com" target="_blank" moz-do-not-send="true">www.asipto.com</a></pre>
</div>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio World Conference - May 6-8, 2019 -- <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a>
Kamailio Advanced Training -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a></pre>
</body>
</html>