Call Without Authorization
Hi everybody, i create my xml_curl script as that don't allow unregistered calls with the following condition *<condition field=\"\${sofia_contact */{$sipuser}@$domain}\" expression=\"^[^@]+@(.+)\">* and its working but yesterday a call is originated from having *fs_cli log as * http://pastebin.freeswitch.org/22050 *xml_cdr is* http://pastebin.freeswitch.org/22052 *dialplan xml is * http://pastebin.freeswitch.org/22054 this is only example that how the hacker breached i want to know that *1. how it is possible that this call is originated as i check condition that allow to call only registered sip accounts.* *2. how to prevent that this would not happened in future. * *3. if there any better way to do that do inform me;* i check about 500 calls placed under the given scenario and many of them also answered Regards Shahzad Bhatti
On Fri, Feb 28, 2014 at 11:51 AM, Shahzad Bhatti <shahzad.bhatti@g-r-v.com> wrote:
3. if there any better way to do that do inform me;
I know this isn't what you're asking, but isn't it better to have something like: <param name="auth-calls" value="true"/> In your sofia conf? I'm sorry if I totally misunderstand what you're trying to do. Also, I'd remove this condition form your dialplan: <condition field="destination_number" expression="^destination_number$"> I'm sure you know it will always be true :) Gabe
participants (2)
-
Gabriel Gunderson
-
Shahzad Bhatti