14 Dec
2018
14 Dec
'18
11:32 a.m.
The latest version doesn't relay to other sip servers is authentication
is not enabled. So practically a default kamailio installation can be
used to call only between users that register to that instance. I think
is fair enough from security vs easy-to-start balance.
User authentication is not enabled because depends on a database
backend, and that is a choice of people installing it. Maybe we can add
an installation wizard somewhere (maybe in kamcli) that can be run and
allows users to select some of the options inactive (the defined
feature) in the default configuration file and updates the kamailio.cfg
to enable them (add the corresponding #!define tokens).
And again, if someone here has ideas about what we should add in the
default config file, security related or something else, just propose here.
Cheers,
Daniel
On 13.12.18 18:46, Sergiu Pojoga wrote:
I see, then it's false alarm. Just wanted to make
sure my favorite OS
doesn't loose security merit points because of a potential flaw in one
of its packages.
Cheers,
--Sergiu
On Thu, Dec 13, 2018 at 2:46 AM Daniel-Constantin Mierla
<miconda(a)gmail.com <mailto:miconda@gmail.com>> wrote:
That is the default configuration file, allowing to register and
make calls between users.
Kamailio by default (with empty routing block) doesn't do
anything. So it doesn't route out the request, nor sends a reply.
It is like this from the early phase of SIP Express Router, if
people feel to change it in some way, just propose here for
discussions.
Cheers,
Daniel
On 12.12.18 22:35, Sergiu Pojoga wrote:
--
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com
Kamailio Advanced Training -- www.asipto.com
Did anyone notice that when installing
Kamailio from FreeBSD
package, by default, it accepts registration with whatever
account credentials?
Not sure if it's like that with other OS packages (usually I
install it from source), but this behavior kind of doesn't go
with the popular saying that Kamailio by default "does nothing", lol.
Regards,
--Sergiu
_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users(a)lists.kamailio.org <mailto:sr-users@lists.kamailio.org>
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
--
Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com>
www.twitter.com/miconda <http://www.twitter.com/miconda> --
www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>
Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com
<http://www.kamailioworld.com>
Kamailio Advanced Training -- www.asipto.com <http://www.asipto.com>
_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users(a)lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users