The latest version doesn't relay to other sip servers is
authentication is not enabled. So practically a default kamailio
installation can be used to call only between users that register
to that instance. I think is fair enough from security vs
easy-to-start balance.
User authentication is not enabled because depends on a database backend, and that is a choice of people installing it. Maybe we can add an installation wizard somewhere (maybe in kamcli) that can be run and allows users to select some of the options inactive (the defined feature) in the default configuration file and updates the kamailio.cfg to enable them (add the corresponding #!define tokens).
And again, if someone here has ideas about what we should add in the default config file, security related or something else, just propose here.
Cheers,
Daniel
I see, then it's false alarm. Just wanted to make sure my favorite OS doesn't loose security merit points because of a potential flaw in one of its packages.
Cheers,--Sergiu
On Thu, Dec 13, 2018 at 2:46 AM Daniel-Constantin Mierla <miconda@gmail.com> wrote:
That is the default configuration file, allowing to register and make calls between users.
Kamailio by default (with empty routing block) doesn't do anything. So it doesn't route out the request, nor sends a reply.
It is like this from the early phase of SIP Express Router, if people feel to change it in some way, just propose here for discussions.
Cheers,
Daniel
On 12.12.18 22:35, Sergiu Pojoga wrote:
Did anyone notice that when installing Kamailio from FreeBSD package, by default, it accepts registration with whatever account credentials?
Not sure if it's like that with other OS packages (usually I install it from source), but this behavior kind of doesn't go with the popular saying that Kamailio by default "does nothing", lol.
Regards,--Sergiu
_______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users-- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com Kamailio Advanced Training -- www.asipto.com
_______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com Kamailio Advanced Training -- www.asipto.com