Update of /usr/cvsroot/asterisk
In directory mongoose.digium.com:/tmp/cvs-serv8425
Modified Files:
CREDITS SECURITY asterisk.8 asterisk.sgml
Log Message:
Fix various documentation issues (bugs #5464-5467)
Index: CREDITS
===================================================================
RCS file: /usr/cvsroot/asterisk/CREDITS,v
retrieving revision 1.30
retrieving revision 1.31
diff -u -d -r1.30 -r1.31
--- CREDITS 5 May 2005 12:52:18 -0000 1.30
+++ CREDITS 18 Oct 2005 21:06:38 -0000 1.31
@@ -1,6 +1,6 @@
=== DEVELOPMENT SUPPORT ===
-I'd like to thank the following companies for helping fund development of
+We'd like to thank the following companies for helping fund development of
Asterisk:
Pilosoft, Inc. - for supporting ADSI development in Asterisk
@@ -26,33 +26,36 @@
PhoneJack and Linejack card to the project. (http://www.quicknet.net)
=== MISCELLANEOUS PATCHES ===
+Jim Dixon - Zapata Telephony and app_rpt
+ http://www.zapatatelephony.org/app_rpt.html
Russell Bryant - Asterisk 1.0 maintainer and misc. enhancements
- [EMAIL PROTECTED]
-Anthony Minessale - Countless big and small fixes, and relentless forward push
- [EMAIL PROTECTED] http://www.asterlink.com
+ [EMAIL PROTECTED]
+Anthony Minessale II - Countless big and small fixes, and relentless forward
push
+ [EMAIL PROTECTED] http://www.asterlink.com
James Golovich - Innumerable contributions
- You can find him and asterisk-perl at http://asterisk.gnuinter.net
+ You can find him and asterisk-perl at http://asterisk.gnuinter.net
Andre Bierwirth - Extension hints and status
Oliver Daudey - ISDN4Linux fixes
Pauline Middelink - ISDN4Linux patches and some general patches.
- She can be found at http://www.polyware.nl/~middelink/En/
+ She can be found at http://www.polyware.nl/~middelink/En/
Jean-Denis Girard - Various contributions from the South Pacific Islands
- [EMAIL PROTECTED] http://www.esoft.pf
-William Jordan / Vonage - MySQL enhancmenets to Voicemail
+ [EMAIL PROTECTED] http://www.esoft.pf
+William Jordan / Vonage - MySQL enhancements to Voicemail
[EMAIL PROTECTED]
Jac Kersing - Various fixes
Steven Critchfield - Seek and Trunc functions for playback and recording
- [EMAIL PROTECTED]
+ [EMAIL PROTECTED]
Jefferson Noxon - app_lookupcidname, app_db, and various other contributions
Klaus-Peter Junghanns - in-band DTMF on SIP and MGCP
Ross Finlayson - Dynamic RTP payload support
Mahmut Fettahlioglu - Audio recording, music-on-hold changes, alaw file
- format, and various fixes. Can be contacted at [EMAIL PROTECTED]
+ format, and various fixes. Can be contacted at [EMAIL PROTECTED]
James Dennis - Cisco SIP compatibility patches to work with SIP service
- providers. Can be contacted at [EMAIL PROTECTED]
-Tilghman Lesher - - Route lookup code; ast_localtime(),
ast_say_date_with_format();
- GotoIfTime, Random, SayUnixTime, HasNewVoicemail, and Cut
applications,
- along with various other patches.
http://asterisk.drunkcoder.com/
+ providers. Can be contacted at [EMAIL PROTECTED]
+Tilghman Lesher - ast_localtime(); ast_say_date_with_format();
+ GotoIfTime, Random, SayUnixTime, HasNewVoicemail applications;
+ CUT, SORT, EVAL, CURL, FIELDQTY, STRFTIME, QUEUEAGENT* functions;
+ and other innumerable bug fixes. http://asterisk.drunkcoder.com/
Jayson Vantuyl - Manager protocol changes, various other bugs.
[EMAIL PROTECTED]
Thorsten Lockert - OpenBSD, FreeBSD ports, making MacOS X port run on 10.3,
@@ -60,24 +63,31 @@
bugs. [EMAIL PROTECTED]
Brian West - ODBC support and Bug Marshaling
Josh Roberson - chan_zap reload support, Advanced Voicemail Features, other
misc. patches,
- and Bug Marshalling. - [EMAIL PROTECTED],
http://www.asteriasgi.com
+ and Bug Marshalling. - [EMAIL PROTECTED], http://www.asteriasgi.com
William Waites - syslog support, SIP NAT traversal for SIP-UA. [EMAIL
PROTECTED]
Rich Murphey - Porting to FreeBSD, NetBSD, OpenBSD, and Darwin.
[EMAIL PROTECTED] http://whiteoaklabs.com
Simon Lockhart - Porting to Solaris (based on work of Logan ???)
[EMAIL PROTECTED]
-Olle Johansson - SIP RFC compliance and testing, testing, testing
- [EMAIL PROTECTED]
+Olle E. Johansson - SIP RFC compliance, documentation and testing, testing,
testing
+ [EMAIL PROTECTED], http://edvina.net
+Steve Kann - new jitter buffer for IAX2
+ [EMAIL PROTECTED]
+Constantine Filin - major contributions to the Asterisk Realtime Architecture
+Steve Murphy - privacy support
=== OTHER CONTRIBUTIONS ===
John Todd - Monkey sounds and associated teletorture prompt
+Michael Jerris - bug marshaling
+Leif Madsen, Jared Smith and Jim van Meggelen - the Asterisk book
+ available under a Creative Commons License at
http://www.asteriskdocs.org
=== HOLD MUSIC ===
Music provided by www.freeplaymusic.com
=== OTHER SOURCE CODE IN ASTERISK ===
-I did not implement the codecs in asterisk. Here is the copyright on the
+Digium did not implement the codecs in Asterisk. Here is the copyright on the
GSM source:
Copyright 1992, 1993, 1994 by Jutta Degener and Carsten Bormann,
@@ -102,7 +112,7 @@
Copyright 1992 by Stichting Mathematisch Centrum, Amsterdam, The
Netherlands.
- All Rights Reserved
+ All Rights Reserved
Permission to use, copy, modify, and distribute this software and its
documentation for any purpose and without fee is hereby granted,
Index: SECURITY
===================================================================
RCS file: /usr/cvsroot/asterisk/SECURITY,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -d -r1.3 -r1.4
--- SECURITY 2 Apr 2004 07:24:33 -0000 1.3
+++ SECURITY 18 Oct 2005 21:06:38 -0000 1.4
@@ -4,6 +4,32 @@
IMPROPER CONFIGURATION OF ASTERISK COULD ALLOW UNAUTHORIZED USE OF YOUR
FACILITIES, POTENTIALLY INCURRING SUBSTANTIAL CHARGES.
+Asterisk security involves both network security (encryption, authentication)
+as well as dialplan security (authorization - who can access services in
+your pbx). If you are setting up Asterisk in production use, please make
+sure you understand the issues involved.
+
+* NETWORK SECURITY
+
+If you install Asterisk and use the "make samples" command to install
+a demonstration configuration, Asterisk will open a few ports for accepting
+VoIP calls. Check the channel configuration files for the ports and IP
addresses.
+
+If you enable the manager interface in manager.conf, please make sure that
+you access manager in a safe environment or protect it with SSH or other
+VPN solutions.
+
+For all TCP/IP connections in Asterisk, you can set ACL lists that
+will permit or deny network access to Asterisk services. Please check
+the "permit" and "deny" configuration options in manager.conf and
+the VoIP channel configurations - i.e. sip.conf and iax.conf.
+
+The IAX2 protocol supports strong RSA key authentication as well as
+AES encryption of voice and signalling. The SIP channel does not
+support encryption in this version of Asterisk.
+
+* DIALPLAN SECURITY
+
First and foremost remember this:
USE THE EXTENSION CONTEXTS TO ISOLATE OUTGOING OR TOLL SERVICES FROM ANY
@@ -38,4 +64,4 @@
DON'T FORGET TO TAKE THE DEMO CONTEXT OUT OF YOUR DEFAULT CONTEXT. There
isn't really a security reason, it just will keep people from wanting to
-play with your asterisk setup remotely.
+play with your Asterisk setup remotely.
Index: asterisk.8
===================================================================
RCS file: /usr/cvsroot/asterisk/asterisk.8,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -d -r1.1 -r1.2
--- asterisk.8 15 Sep 2005 00:12:36 -0000 1.1
+++ asterisk.8 18 Oct 2005 21:06:38 -0000 1.2
@@ -3,7 +3,7 @@
.\" <http://shell.ipoline.com/~elmert/comp/docbook2X/>
.\" Please send any bug reports, improvements, comments, patches,
.\" etc. to Steve Cheng <[EMAIL PROTECTED]>.
-.TH "ASTERISK" "8" "17 May 2005" "asterisk 1.0" ""
+.TH "ASTERISK" "8" "18 October 2005" "asterisk 1.2" ""
.SH NAME
asterisk \- All-purpose telephony server.
@@ -20,22 +20,25 @@
provides Private Branch eXchange (PBX), Interactive Voice Response (IVR),
Automated Call Distribution (ACD), Voice over IP (VoIP) gatewaying,
Conferencing, and a plethora of other telephony applications to a broad
-range of telephony devices including packet voice (SIP, IAX, MGCP, Skinny,
+range of telephony devices including packet voice (SIP, IAX2, MGCP, Skinny,
H.323) devices (both endpoints and proxies), as well as traditional TDM
hardware including T1, E1, ISDN PRI, GR-303, RBS, Loopstart, Groundstart,
ISDN BRI, and many more.
.PP
-Asterisk reads most of its configuration files from configuration files
-located in /etc/asterisk. Virtually all aspects of the operation of
-asterisk's configuration files can be found in the sample configuration
-files. The format for those files is generally beyond the scope of this
-man page.
+At start, Asterisk reads the /etc/asterisk/asterisk.conf main configuration
+file and locates the rest of the configuration files from the configuration
+in that file. The -C option specifies an alternate main configuration file.
+Virtually all aspects of the operation of asterisk's configuration files
+can be found in the sample configuration files. The format for those files
+is generally beyond the scope of this man page.
.PP
When running with \fB-c\fR, \fB-r\fR or \fB-R\fR
options, Asterisk supplies a powerful command line, including command
completion, which may be used to monitors its status, perform a variety
of administrative actions and even explore the applications that are
currently loaded into the system.
+.PP
+Asterisk is a trademark of Digium, Inc.
.SH "OPTIONS"
.TP
\fB-C \fIfile\fB\fR
@@ -49,6 +52,10 @@
.TP
\fB-d\fR
Enable extra debugging statements.
+
+Note: This always sets the debug level in the asterisk process,
+even if it is running in the background. This will affect the size
+of your log files.
.TP
\fB-f\fR
Do not fork or detach from controlling terminal.
@@ -70,7 +77,8 @@
Provide brief summary of command line arguments and terminate.
.TP
\fB-i\fR
-Prompt user to intialize any encrypted private keys during startup.
+Prompt user to intialize any encrypted private keys for IAX2
+secure authentication during startup.
.TP
\fB-M \fIvalue\fB\fR
Limits the maximum number of calls to the specified value. This can
@@ -122,7 +130,11 @@
Specifying this option implies \fB-f\fR and will cause
asterisk to no longer fork or detach from the controlling terminal.
This option may also be used in conjunction with \fB-r\fR
-and \fB-R\fR
+and \fB-R\fR\&.
+
+Note: This always sets the verbose level in the asterisk process,
+even if it is running in the background. This will affect the size
+of your log files.
.TP
\fB-V\fR
Display version information and exit immediately.
@@ -147,7 +159,9 @@
.PP
*CLI> \fBhelp\fR - Help on Asterisk CLI
.PP
-*CLI> \fBshow applications\fR - Show loaded applications
+*CLI> \fBshow applications\fR - Show loaded dialplan applications
+.PP
+*CLI> \fBshow functions\fR - Show loaded dialplan functions
.PP
http://www.asterisk.org - The Asterisk Home Page
.PP
Index: asterisk.sgml
===================================================================
RCS file: /usr/cvsroot/asterisk/asterisk.sgml,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -d -r1.3 -r1.4
--- asterisk.sgml 18 May 2005 01:49:12 -0000 1.3
+++ asterisk.sgml 18 Oct 2005 21:06:38 -0000 1.4
@@ -1,14 +1,14 @@
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN">
<refentry>
<refentryinfo>
- <date>2004-07-18</date>
+ <date>2005-10-18</date>
</refentryinfo>
<refmeta>
<refentrytitle>
<application>asterisk</application>
</refentrytitle>
<manvolnum>8</manvolnum>
- <refmiscinfo>asterisk 1.0</refmiscinfo>
+ <refmiscinfo>asterisk 1.2</refmiscinfo>
</refmeta>
<refnamediv>
<refname>
@@ -45,17 +45,18 @@
provides Private Branch eXchange (PBX), Interactive Voice Response
(IVR),
Automated Call Distribution (ACD), Voice over IP (VoIP) gatewaying,
Conferencing, and a plethora of other telephony applications to a broad
- range of telephony devices including packet voice (SIP, IAX, MGCP,
Skinny,
+ range of telephony devices including packet voice (SIP, IAX2, MGCP,
Skinny,
H.323) devices (both endpoints and proxies), as well as traditional TDM
hardware including T1, E1, ISDN PRI, GR-303, RBS, Loopstart,
Groundstart,
ISDN BRI, and many more.
</para>
<para>
- Asterisk reads most of its configuration files from configuration files
- located in /etc/asterisk. Virtually all aspects of the operation of
- asterisk's configuration files can be found in the sample configuration
- files. The format for those files is generally beyond the scope of this
- man page.
+ At start, Asterisk reads the /etc/asterisk/asterisk.conf main
configuration
+ file and locates the rest of the configuration files from the
configuration
+ in that file. The -C option specifies an alternate main configuration
file.
+ Virtually all aspects of the operation of asterisk's configuration files
+ can be found in the sample configuration files. The format for those
files
+ is generally beyond the scope of this man page.
</para>
<para>
When running with <command>-c</command>, <command>-r</command> or
<command>-R</command>
@@ -64,6 +65,9 @@
of administrative actions and even explore the applications that are
currently loaded into the system.
</para>
+ <para>
+ Asterisk is a trademark of Digium, Inc.
+ </para>
</refsect1>
<refsect1>
<title>OPTIONS</title>
@@ -93,6 +97,11 @@
<para>
Enable extra debugging statements.
</para>
+ <para>
+ Note: This always sets the debug level in the asterisk
process,
+ even if it is running in the background. This will
affect the size
+ of your log files.
+ </para>
</listitem>
</varlistentry>
<varlistentry>
@@ -138,7 +147,8 @@
<term>-i</term>
<listitem>
<para>
- Prompt user to intialize any encrypted private keys
during startup.
+ Prompt user to intialize any encrypted private keys for
IAX2
+ secure authentication during startup.
</para>
</listitem>
</varlistentry>
@@ -240,7 +250,12 @@
Specifying this option implies <command>-f</command>
and will cause
asterisk to no longer fork or detach from the
controlling terminal.
This option may also be used in conjunction with
<command>-r</command>
- and <command>-R</command>
+ and <command>-R</command>.
+ </para>
+ <para>
+ Note: This always sets the verbose level in the
asterisk process,
+ even if it is running in the background. This will
affect the size
+ of your log files.
</para>
</listitem>
</varlistentry>
@@ -290,7 +305,10 @@
*CLI> <command>help</command> - Help on Asterisk CLI
</para>
<para>
- *CLI> <command>show applications</command> - Show loaded applications
+ *CLI> <command>show applications</command> - Show loaded dialplan
applications
+ </para>
+ <para>
+ *CLI> <command>show functions</command> - Show loaded dialplan
functions
</para>
<para>
http://www.asterisk.org - The Asterisk Home Page
_______________________________________________
Asterisk-Cvs mailing list
[email protected]
http://lists.digium.com/mailman/listinfo/asterisk-cvs
