[asterisk-dev] sip.conf realtime - potential logic flaw ?

Jonathan K. Creasy JCreasy at netlogic.net
Thu Nov 1 13:14:38 CDT 2007


Where is the most appropriate place to express interest?

From: asterisk-dev-bounces at lists.digium.com [mailto:asterisk-dev-bounces at lists.digium.com] On Behalf Of Ryan Mitchell
Sent: Wednesday, October 31, 2007 2:05 PM
To: Asterisk Developers Mailing List
Subject: Re: [asterisk-dev] sip.conf realtime - potential logic flaw ?

Exactly.  I have a patch I wrote last year that does precisely that -- ip/port gets checked first, then username/password.  That was for 1.2 something.  If there's interest I'll make it work for 1.4 and submit a patch.
On Oct 31, 2007 3:02 AM, Benny Amorsen <benny+usenet at amorsen.dk<mailto:benny+usenet at amorsen.dk>> wrote:
Ryan's problem is that he has both a PSTN carrier with a fixed IP and
local phones with host=dynamic. Your problem is solved by checking
"host=dynamic", but Ryan's problem isn't.

In general, I think username-based authentication should be done after
ip-based.


/Benny



_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--

asterisk-dev mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-dev



--
Ryan Mitchell <rjm at tcl.net<mailto:rjm at tcl.net>>
Telecom Logic, LLC
http://www.tcl.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-dev/attachments/20071101/51419e19/attachment.htm 


More information about the asterisk-dev mailing list