Did anyone notice that when installing Kamailio from FreeBSD package, by default, it accepts registration with whatever account credentials? Not sure if it's like that with other OS packages (usually I install it from source), but this behavior kind of doesn't go with the popular saying that Kamailio by default "does nothing", lol. Regards, --Sergiu
This question has to be directed to maintainer of the kamailio package in FreeBSD, as the Kamailio project has no oversight or control over what's being decided on that end WRT it's defaults. -Max On Wed, Dec 12, 2018, 1:36 PM Sergiu Pojoga <pojogas@gmail.com wrote:
Did anyone notice that when installing Kamailio from FreeBSD package, by default, it accepts registration with whatever account credentials?
Not sure if it's like that with other OS packages (usually I install it from source), but this behavior kind of doesn't go with the popular saying that Kamailio by default "does nothing", lol.
Regards, --Sergiu _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
That is the default configuration file, allowing to register and make calls between users. Kamailio by default (with empty routing block) doesn't do anything. So it doesn't route out the request, nor sends a reply. It is like this from the early phase of SIP Express Router, if people feel to change it in some way, just propose here for discussions. Cheers, Daniel On 12.12.18 22:35, Sergiu Pojoga wrote:
Did anyone notice that when installing Kamailio from FreeBSD package, by default, it accepts registration with whatever account credentials?
Not sure if it's like that with other OS packages (usually I install it from source), but this behavior kind of doesn't go with the popular saying that Kamailio by default "does nothing", lol.
Regards, --Sergiu
_______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com Kamailio Advanced Training -- www.asipto.com
I see, then it's false alarm. Just wanted to make sure my favorite OS doesn't loose security merit points because of a potential flaw in one of its packages. Cheers, --Sergiu On Thu, Dec 13, 2018 at 2:46 AM Daniel-Constantin Mierla <miconda@gmail.com> wrote:
That is the default configuration file, allowing to register and make calls between users.
Kamailio by default (with empty routing block) doesn't do anything. So it doesn't route out the request, nor sends a reply.
It is like this from the early phase of SIP Express Router, if people feel to change it in some way, just propose here for discussions.
Cheers, Daniel On 12.12.18 22:35, Sergiu Pojoga wrote:
Did anyone notice that when installing Kamailio from FreeBSD package, by default, it accepts registration with whatever account credentials?
Not sure if it's like that with other OS packages (usually I install it from source), but this behavior kind of doesn't go with the popular saying that Kamailio by default "does nothing", lol.
Regards, --Sergiu
_______________________________________________ Kamailio (SER) - Users Mailing Listsr-users@lists.kamailio.orghttps://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com Kamailio Advanced Training -- www.asipto.com
The latest version doesn't relay to other sip servers is authentication is not enabled. So practically a default kamailio installation can be used to call only between users that register to that instance. I think is fair enough from security vs easy-to-start balance. User authentication is not enabled because depends on a database backend, and that is a choice of people installing it. Maybe we can add an installation wizard somewhere (maybe in kamcli) that can be run and allows users to select some of the options inactive (the defined feature) in the default configuration file and updates the kamailio.cfg to enable them (add the corresponding #!define tokens). And again, if someone here has ideas about what we should add in the default config file, security related or something else, just propose here. Cheers, Daniel On 13.12.18 18:46, Sergiu Pojoga wrote:
I see, then it's false alarm. Just wanted to make sure my favorite OS doesn't loose security merit points because of a potential flaw in one of its packages.
Cheers, --Sergiu
On Thu, Dec 13, 2018 at 2:46 AM Daniel-Constantin Mierla <miconda@gmail.com <mailto:miconda@gmail.com>> wrote:
That is the default configuration file, allowing to register and make calls between users.
Kamailio by default (with empty routing block) doesn't do anything. So it doesn't route out the request, nor sends a reply.
It is like this from the early phase of SIP Express Router, if people feel to change it in some way, just propose here for discussions.
Cheers, Daniel
On 12.12.18 22:35, Sergiu Pojoga wrote:
Did anyone notice that when installing Kamailio from FreeBSD package, by default, it accepts registration with whatever account credentials?
Not sure if it's like that with other OS packages (usually I install it from source), but this behavior kind of doesn't go with the popular saying that Kamailio by default "does nothing", lol.
Regards, --Sergiu
_______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org <mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> www.twitter.com/miconda <http://www.twitter.com/miconda> -- www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com <http://www.kamailioworld.com> Kamailio Advanced Training -- www.asipto.com <http://www.asipto.com>
_______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com Kamailio Advanced Training -- www.asipto.com
participants (3)
-
Daniel-Constantin Mierla -
Maxim Sobolev -
Sergiu Pojoga