[prev in list] [next in list] [prev in thread] [next in thread] 

List:       asterisk-dev
Subject:    Re: [asterisk-dev] sip.conf realtime - potential logic flaw ?
From:       "Ryan Mitchell" <brak2718 () gmail ! com>
Date:       2007-10-31 19:05:08
Message-ID: 522e1d170710311205g55792089i22181010efdfc9fb () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Exactly.  I have a patch I wrote last year that does precisely that --
ip/port gets checked first, then username/password.  That was for
1.2something.  If there's interest I'll make it work for
1.4 and submit a patch.

On Oct 31, 2007 3:02 AM, Benny Amorsen <benny+usenet@amorsen.dk> wrote:

> Ryan's problem is that he has both a PSTN carrier with a fixed IP and
> local phones with host=dynamic. Your problem is solved by checking
> "host=dynamic", but Ryan's problem isn't.
>
> In general, I think username-based authentication should be done after
> ip-based.
>
>
> /Benny
>
>
>
> _______________________________________________
> --Bandwidth and Colocation Provided by http://www.api-digital.com--
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-dev
>



-- 
Ryan Mitchell <rjm@tcl.net>
Telecom Logic, LLC
http://www.tcl.net

[Attachment #5 (text/html)]

Exactly.&nbsp; I have a patch I wrote last year that does precisely that -- ip/port \
gets checked first, then username/password.&nbsp; That was for 1.2 something.&nbsp; \
If there&#39;s interest I&#39;ll make it work for 1.4 and submit a patch. \
<br><br><div class="gmail_quote">On Oct 31, 2007 3:02 AM, Benny Amorsen &lt;<a \
href="mailto:benny+usenet@amorsen.dk">benny+usenet@amorsen.dk</a>&gt; \
wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, \
204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Ryan&#39;s problem is that he \
has both a PSTN carrier with a fixed IP and<br>local phones with host=dynamic. Your \
problem is solved by checking<br>&quot;host=dynamic&quot;, but Ryan&#39;s problem \
isn&#39;t.<br><br>In general, I think username-based authentication should be done \
after <br>ip-based.<br><font \
color="#888888"><br><br>/Benny<br></font><div><div></div><div \
class="Wj3C7c"><br><br><br>_______________________________________________<br>--Bandwidth \
and Colocation Provided by <a href="http://www.api-digital.com--" target="_blank"> \
http://www.api-digital.com--</a><br><br>asterisk-dev mailing list<br>To UNSUBSCRIBE \
or update options visit:<br> &nbsp; <a \
href="http://lists.digium.com/mailman/listinfo/asterisk-dev" \
target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-dev \
</a><br></div></div></blockquote></div><br><br clear="all"><br>-- <br>Ryan Mitchell \
&lt;<a href="mailto:rjm@tcl.net">rjm@tcl.net</a>&gt;<br>Telecom Logic, LLC<br><a \
href="http://www.tcl.net">http://www.tcl.net</a>



_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--

asterisk-dev mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-dev

[prev in list] [next in list] [prev in thread] [next in thread]