[sr-dev] git:master:41f41d6d: etc/kamailio.cfg: do not relay to foreign network if auth is not enabled

Daniel-Constantin Mierla miconda at gmail.com
Thu Mar 15 22:27:02 CET 2018


Module: kamailio
Branch: master
Commit: 41f41d6d2850cdd5ab1a1b5d55bbb7ebd697ff7a
URL: https://github.com/kamailio/kamailio/commit/41f41d6d2850cdd5ab1a1b5d55bbb7ebd697ff7a

Author: Daniel-Constantin Mierla <miconda at gmail.com>
Committer: Daniel-Constantin Mierla <miconda at gmail.com>
Date: 2018-03-15T08:55:22+01:00

etc/kamailio.cfg: do not relay to foreign network if auth is not enabled

- anyone can use a local account and flood external systems

---

Modified: etc/kamailio.cfg

---

Diff:  https://github.com/kamailio/kamailio/commit/41f41d6d2850cdd5ab1a1b5d55bbb7ebd697ff7a.diff
Patch: https://github.com/kamailio/kamailio/commit/41f41d6d2850cdd5ab1a1b5d55bbb7ebd697ff7a.patch

---

diff --git a/etc/kamailio.cfg b/etc/kamailio.cfg
index eb46863d95..b55e06b0cc 100644
--- a/etc/kamailio.cfg
+++ b/etc/kamailio.cfg
@@ -750,6 +750,14 @@ route[AUTH] {
 		exit;
 	}
 
+#!else
+
+	# authentication not enabled - do not relay at all to foreign networks
+	if(uri!=myself) {
+		sl_send_reply("403","Not relaying");
+		exit;
+	}
+
 #!endif
 	return;
 }




More information about the sr-dev mailing list