[SR-Users] FreeBSD Kamailio pkg

[Daniel-Constantin Mierla]

The latest version doesn't relay to other sip servers is authentication
is not enabled. So practically a default kamailio installation can be
used to call only between users that register to that instance. I think
is fair enough from security vs easy-to-start balance.

User authentication is not enabled because depends on a database
backend, and that is a choice of people installing it. Maybe we can add
an installation wizard somewhere (maybe in kamcli) that can be run and
allows users to select some of the options inactive (the defined
feature) in the default configuration file and updates the kamailio.cfg
to enable them (add the corresponding #!define tokens).

And again, if someone here has ideas about what we should add in the
default config file, security related or something else, just propose here.

Cheers,
Daniel

On 13.12.18 18:46, Sergiu Pojoga wrote:
> I see, then it's false alarm. Just wanted to make sure my favorite OS
> doesn't loose security merit points because of a potential flaw in one
> of its packages.
>
> Cheers,
> --Sergiu
>
> On Thu, Dec 13, 2018 at 2:46 AM Daniel-Constantin Mierla
> <miconda at gmail.com <mailto:miconda at gmail.com>> wrote:
>
>     That is the default configuration file, allowing to register and
>     make calls between users.
>
>     Kamailio by default (with empty routing block) doesn't do
>     anything. So it doesn't route out the request, nor sends a reply.
>
>     It is like this from the early phase of SIP Express Router, if
>     people feel to change it in some way, just propose here for
>     discussions.
>
>     Cheers,
>     Daniel
>
>     On 12.12.18 22:35, Sergiu Pojoga wrote:
>>     Did anyone notice that when installing Kamailio from FreeBSD
>>     package, by default, it accepts registration with whatever
>>     account credentials?
>>
>>     Not sure if it's like that with other OS packages (usually I
>>     install it from source), but this behavior kind of doesn't go
>>     with the popular saying that Kamailio by default "does nothing", lol.
>>
>>     Regards,
>>     --Sergiu
>>
>>     _______________________________________________
>>     Kamailio (SER) - Users Mailing List
>>     sr-users at lists.kamailio.org <mailto:sr-users at lists.kamailio.org>
>>     https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
>     -- 
>     Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com>
>     www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda>
>     Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com <http://www.kamailioworld.com>
>     Kamailio Advanced Training -- www.asipto.com <http://www.asipto.com>
>
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com
Kamailio Advanced Training -- www.asipto.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20181214/9081d827/attachment.html>