[asterisk-bugs] [JIRA] (ASTERISK-23033) direct call can't be placed over h323 if peer is not registered in gatekeeper

[Dmitry Melekhov (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-23033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=213216#comment-213216 ] 

Dmitry Melekhov commented on ASTERISK-23033:
--------------------------------------------

Hello!

Well, other gateways like cisco or addpac do such calls, really we use asterisk as sort of cisco replacement, so I think this is not very large security breach  :-)
And ooh323 calls peers directly if gatekeeper is available, and these peers are not known to gatekeeper, so gatekeeper do not prohibit these calls, although yes, asterisk have to be registered in gatekeeper to make calls.

Moreover, in our environment gatekeeper and asterisk admin is the same engineer - me ;-)

So, for me it is better to have an ability to make some calls if gatekeeper is not available for some reason then to have better security.
May be solution can be in configuration parameter, so asterisk's admin will choose behaviour? 

Thank you!
                
> direct call can't be placed over h323 if peer is not registered in gatekeeper
> -----------------------------------------------------------------------------
>
>                 Key: ASTERISK-23033
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-23033
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Addons/chan_ooh323
>    Affects Versions: 11.7.0
>         Environment: Centos 6
>            Reporter: Dmitry Melekhov
>            Assignee: Alexander Anikin
>            Severity: Minor
>         Attachments: h323_log
>
>
> If we have asterisk registered in gatekeeper and call peer directly- call doesn't pass, but stuck:
>     -- Executing [6401 at sipphones:1] Dial("SIP/6052-00000008", "OOH323/6401 at cisco") in new stack
>     -- Called OOH323/6401 at cisco
> I'll be glad to provide any useful info.
> Thank you!

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.asterisk.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira