[Asterisk-Dev] Re: [Asterisk-Users] SIP SECURITY WARNING: v1-0
(cvs today) sip context in general section ignored goes to
default instead - allowing unauthorized sip devices to place
calls in default context
Rich Adamson
radamson at routers.com
Sat Dec 4 06:08:57 MST 2004
Since there seems to be a large number of folks implementing * with
little or no initial understanding of contexts (etc), would it not be
appropriate to change the sample config files to address both sip and
iax defaults?
At least make it more obvious for those that actually read the contents
of the config files. :)
------------------------
> It's still a legitimate bug report, but for a different reason - would
> it be a good idea for Asterisk to disable the SIP channel completely if
> no context has been explicitly specified in sip.conf? Same goes for all
> other types of channel support (IAX, H323, etc).
>
> Regards,
>
> Daniel
>
>
> Martin List-Petersen wrote:
>
> >On Sat, 2004-12-04 at 00:47, Andy Reinke wrote:
> >
> >
> >>SIP SECURITY WARNING
> >>
> >>Version: v1-0 (cvs today)
> >>
> >>Problem: sip context in general section ignored - goes to default -
> >>allowing unauthorized sip devices to place calls in default context
> >>
> >>
> >>
> >[CUT]
> >
> >
> >>Sip.conf
> >>[general]
> >>contex=sip-unauthorized
> >>port=5060
> >>bindaddr=0.0.0.0
> >>localnet=172.16.0.0/255.255.255.0
> >><eof>
> >>
> >>
> >
> >And by the way: if you spell "context" the way you do (check above) it
> >of course will get ignored.
> >
> >Slán leat,
> >Martin List-Petersen
> >Dublin, Eire
> >(contact info on --> http://www.marlow.dk/)
> >
> >
> >_______________________________________________
> >Asterisk-Dev mailing list
> >Asterisk-Dev at lists.digium.com
> >http://lists.digium.com/mailman/listinfo/asterisk-dev
> >To UNSUBSCRIBE or update options visit:
> > http://lists.digium.com/mailman/listinfo/asterisk-dev
> >
> >
> _______________________________________________
> Asterisk-Dev mailing list
> Asterisk-Dev at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-dev
> To UNSUBSCRIBE or update options visit:
> http://lists.digium.com/mailman/listinfo/asterisk-dev
---------------End of Original Message-----------------
More information about the asterisk-dev
mailing list