thanks alot for great reply, using sip-to-host , ip, domain on realtime directory we found out who steal account informations,because we only serve this servive for users who have ADSL account of our ISP compay...so restict on the range of ip-addresses but i think there is not any soltion for implement limit only one user login, thanks so much ________________________________ From: Michael Collins <msc@freeswitch.org> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Sent: Thursday, June 28, 2012 8:16 PM Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly! This is probably the wrong way to handle the situation. There are definitely drawbacks. It sounds like you're wanting a "first come, first served" scenario. The problem is that if the thief gets userA's information then all he would have to do is disconnect the real userA's phone, thereby making that registration go away, then he could register his bogus "userA" and no one would know any better. The only symptom would be that the real userA would not be able to register, but by the time you found out about that the thief could have made all sorts of calls while pretending to be userA. I believe you need to rethink your security strategy. If the real issue is that someone can steal user account information and use it nefariously then you need to solve THAT problem, or at least mitigate it. For example, just how did the thief steal the credentials? I get the feeling that trying to do this "I'm first, so no one else can register" thing is a poor way to make things secure. It's kind of like leaving the front door unlocked and then super gluing all your stuff to the floor so no one can walk in and take it. -MC On Thu, Jun 28, 2012 at 8:21 AM, Samira Mh <saami_mh@ymail.com> wrote: suppose we have account with the following information:
extension=1000 secret=12345 callerid=userA -------------------------- now the user(B,C,D ..) -NOT IMPORTANT who?- stolen the account informations of userA and want to login using userA account
while the userA is now connect to server,but at the same time userB register on sip phone using userA iformations(extesion=1000,secret=12345,...) and by set multi_registering=false the userA is not connected now, and userB is now connected because only one user able to register but i don't want this situation appear,i want to set if userA is now connected the other user couldn't connect using same informations thanksss
________________________________ From: Peter Olsson <peter.olsson@visionutveckling.se> To: 'FreeSWITCH Users Help' <freeswitch-users@lists.freeswitch.org> Sent: Thursday, June 28, 2012 6:51 PM Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!
I still don’t understand.. :) How could UserA use UserB’s account? Aren’t you using different passwords for the user? /Peter Från:freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] För Samira Mh Skickat: den 28 juni 2012 10:05 Till: FreeSWITCH Users Help Ämne: Re: [Freeswitch-users] multiple registerations coudln't worked correctly! i have implemented VODSL service using freeswitch,and create accounts for user on the server,but i don't want the userA use the account of userB, i want to restrict each user only use her/his account not able to use each other account that don't belong to his/her... also i don't want to restrict this using ip addresses ,want to limit using account
________________________________
From:Peter Olsson <peter.olsson@visionutveckling.se> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Sent: Thursday, June 28, 2012 9:44 AM Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!
The option is to enable multiple-registrations, which will make both registrations work simultaneously.
Why is this even a problem, what problem are you trying to solve?
/Peter
28 jun 2012 kl. 06:21 skrev "Samira Mh" <saami_mh@ymail.com<mailto:saami_mh@ymail.com>>:
is there any solutions for the second registration couldn't overwrite the first one registeration ?
________________________________ From: Peter Olsson <peter.olsson@visionutveckling.se<mailto:peter.olsson@visionutveckling.se>> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org<mailto:freeswitch-users@lists.freeswitch.org>> Sent: Wednesday, June 27, 2012 11:46 PM Subject: Re: [Freeswitch-users] multiple registerations coudln't worked correctly!
If they end up with only one registration within FS it's just normal. Since the second registration will overwrite the first.
/Peter ________________________________ Från: freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org> [freeswitch-users-bounces@lists.freeswitch.org<mailto:freeswitch-users-bounces@lists.freeswitch.org>] för Samira Mh [saami_mh@ymail.com<mailto:saami_mh@ymail.com>] Skickat: den 27 juni 2012 21:05 Till: Free SWITCH Users Help Ämne: [Freeswitch-users] multiple registerations coudln't worked correctly!
hi, i have set <param name="multiple-registrations" value="false"/> on internal.xml and switch.conf.xml then restart freeswitch but I could register 2 sip phones using the same extension number at the same time! but i want to only one extension could be register using the same extensions plz help
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org<http://www.freeswitch.org/>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
!DSPAM:4febd86932764854317000!
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
!DSPAM:4fec0eac32768939220457! _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com Join Us At ClueCon - Aug 7-9, 2012 FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org