Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread ABBAS SHAKEEL
Thanks community for sharing your thoughts. @ Faisal Hanif- Both of the solutions you suggested seems equally good for me let me look into it how can i do that. @Stiles This has nothing to do with mean spirited. If an individual is using an open source technology then it don't means that he deve

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Kevin P. Fleming
On 07/07/2010 03:33 PM, Tilghman Lesher wrote: > On Wednesday 07 July 2010 14:58:05 Kevin P. Fleming wrote: >> On 07/07/2010 10:52 AM, Tilghman Lesher wrote: >>> On Wednesday 07 July 2010 05:24:10 A J Stiles wrote: On Tuesday 06 Jul 2010, ABBAS SHAKEEL wrote: > Hello Community, > >

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Tilghman Lesher
On Wednesday 07 July 2010 14:58:05 Kevin P. Fleming wrote: > On 07/07/2010 10:52 AM, Tilghman Lesher wrote: > > On Wednesday 07 July 2010 05:24:10 A J Stiles wrote: > >> On Tuesday 06 Jul 2010, ABBAS SHAKEEL wrote: > >>> Hello Community, > >>> > >>> . I am facing an issue of security i.e. We d

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Steve Edwards
On Wed, 7 Jul 2010, Danny Nicholas wrote: > Ok. I've been reading this thread all day; This seems (to me) to be the > "Best of Both worlds" solution - enable the #exec option in > asterisk.conf and have each .conf call a compiled C program to populate > the actual content. This protects the OP'

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Danny Nicholas
-Original Message- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Kevin P. Fleming Sent: Wednesday, July 07, 2010 2:58 PM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] How to secure Configuration files On

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Kevin P. Fleming
On 07/07/2010 10:52 AM, Tilghman Lesher wrote: > On Wednesday 07 July 2010 05:24:10 A J Stiles wrote: >> On Tuesday 06 Jul 2010, ABBAS SHAKEEL wrote: >>> Hello Community, >>> >>> . I am facing an issue of security i.e. We deploy >>> servers to client end. Now i dont want the client to see my c

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Hans Witvliet
On Wed, 2010-07-07 at 09:06 -0700, Steve Edwards wrote: > On Wed, 7 Jul 2010, Faisal Hanif wrote: > > > 2nd option is by enabling execincludes=yes in asterisk.conf you can use > > #exec in any of asterisk conf file to call any external application and > > asterisk will use configuration returned

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Tzafrir Cohen
On Wed, Jul 07, 2010 at 09:06:26AM -0700, Steve Edwards wrote: > On Wed, 7 Jul 2010, Faisal Hanif wrote: > > > 2nd option is by enabling execincludes=yes in asterisk.conf you can use > > #exec in any of asterisk conf file to call any external application and > > asterisk will use configuration r

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Steve Edwards
On Wed, 7 Jul 2010, Faisal Hanif wrote: > 2nd option is by enabling execincludes=yes in asterisk.conf you can use > #exec in any of asterisk conf file to call any external application and > asterisk will use configuration returned by that external application > and will treat it same as in stat

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Steve Edwards
On Wed, 7 Jul 2010, ABBAS SHAKEEL wrote: > This is a good idea if i place the configuration files in database and > database some where else.. > > Now finally according to community feedback ... > > I will use AGI at max and obfuscate the JAVA code. Place the remaining > configuration in d

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Tilghman Lesher
On Wednesday 07 July 2010 05:24:10 A J Stiles wrote: > On Tuesday 06 Jul 2010, ABBAS SHAKEEL wrote: > > Hello Community, > > > > . I am facing an issue of security i.e. We deploy > > servers to client end. Now i dont want the client to see my configuration > > files (Of course copy and distrib

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread A J Stiles
On Tuesday 06 Jul 2010, ABBAS SHAKEEL wrote: > Hello Community, > > . I am facing an issue of security i.e. We deploy > servers to client end. Now i dont want the client to see my configuration > files (Of course copy and distribute or replicate the logic with out > permission). [ 1 paragraph

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Faisal Hanif
Hi, As per my finding you can have two possible solutions to mentioned problem, 1st is to use realtime curl for all configuration. In this case asterisk will hit your configured URLs to read all configuration. You can run web-server on same or any machine and can use any CGI of Perl, PHP, C,

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread ABBAS SHAKEEL
Thanks Hans, This is a good idea if i place the configuration files in database and database some where else.. Now finally according to community feedback ... I will use AGI at max and obfuscate the JAVA code. Place the remaining configuration in database. Hans i think this will be a good tr

Re: [asterisk-users] How to secure Configuration files

2010-07-07 Thread Hans Witvliet
On Wed, 2010-07-07 at 12:12 +0600, ABBAS SHAKEEL wrote: > Thanks to Gordon and Paul for kind help. > > > Actually we have a limitation to place the Asterisk server in client > premises if the server is in there premises then this means they have > full control over it. > > > harddisk encrypti

Re: [asterisk-users] How to secure Configuration files

2010-07-06 Thread ABBAS SHAKEEL
Thanks to Gordon and Paul for kind help. Actually we have a limitation to place the Asterisk server in client premises if the server is in there premises then this means they have full control over it. harddisk encryption seems a good option but no automated boot is big issue :( Is there some th

Re: [asterisk-users] How to secure Configuration files

2010-07-06 Thread Gordon Henderson
On Tue, 6 Jul 2010, ABBAS SHAKEEL wrote: > Hello Community, > > I have a question , I have been working with asterisk and developed some > successful applications. I am facing an issue of security i.e. We deploy > servers to client end. Now i dont want the client to see my configuration > files (

Re: [asterisk-users] How to secure Configuration files

2010-07-06 Thread Paul Belanger
On Tue, Jul 6, 2010 at 7:40 AM, ABBAS SHAKEEL wrote: > Hello Community, > > I have a question , I have been working with asterisk and developed some > successful applications. I am facing an issue of security i.e.  We deploy > servers to client end. Now i dont want the client to see my configurati

[asterisk-users] How to secure Configuration files

2010-07-06 Thread ABBAS SHAKEEL
Hello Community, I have a question , I have been working with asterisk and developed some successful applications. I am facing an issue of security i.e. We deploy servers to client end. Now i dont want the client to see my configuration files (Of course copy and distribute or replicate the logic