Mike, we tried all kinds of things...this problem is at a deeper level that dialplans can handle.
On Fri, Jun 15, 2012 at 12:55 PM, Michael Picher <[email protected]> wrote: > the other thought could be a special gateway type or a special dial plan > entry type... (a la, site to site dial rule). > > > On Fri, Jun 15, 2012 at 1:26 PM, Kyle Haefner > <[email protected]>wrote: > >> Hi Devs, >> >> After some testing I found that the MSFT_ExchangeTransferHack >> authorization plugin fro sipxproxy is no longer needed with Exchange >> 2010. I.E. a REFER from Exchange no longer looks like it is >> transferring to a foreign domain. >> What this means is that the TransferControl plugin challenges the >> REFER from Exchange. Exchange does not handle the Proxy Authentication >> and the call is gracefully dropped by Exchange (jira XX-9704). >> >> I've written a patch that reads in a couple of FQDNs from the >> /etc/sipxpbx/sipXproxy-config that the TransferControl plugin uses as >> a white list to not challenge the REFER. I tested this and it works >> in sipxecs 4.4 (it should be a pretty straight forward port to 4.6). >> >> I have a few questions. >> >> 1. What is the plan for settings that exist in the /etc/sipxpbx >> directory? Are any of these moving to mongo? >> >> 2. When an exchange voice mail server is set-up in the UI, where are >> the server ip/fqdn settings stored? Is it only in the >> mappingrules.xml? >> >> 3. I don't like the idea of white lists from a security perspective. >> But short of having MS Exchange respond to a Proxy Auth I don't see a >> way around this. A properly functioning firewall should prevent any >> spoofed REFERS. Any thoughts? >> >> Thanks, >> >> Kyle >> >> >> -- >> Kyle Haefner, M.S. >> Communication Systems Programmer >> Colorado State University >> Fort Collins, CO >> Phone: 970-491-1012 >> Email: [email protected] >> _______________________________________________ >> sipx-dev mailing list >> [email protected] >> List Archive: http://list.sipfoundry.org/archive/sipx-dev/ >> > > > > -- > Michael Picher, Director of Technical Services > eZuce, Inc. > > 300 Brickstone Square**** > > Suite 201**** > > Andover, MA. 01810 > O.978-296-1005 X2015 > M.207-956-0262 > @mpicher <http://twitter.com/mpicher> > linkedin <http://www.linkedin.com/profile/view?id=35504760&trk=tab_pro> > www.ezuce.com > > > ------------------------------------------------------------------------------------------------------------ > There are 10 kinds of people in the world, those who understand binary and > those who don't. > > > _______________________________________________ > sipx-dev mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-dev/ > -- Josh Patten eZuce Solutions Architect O.978-296-1005 X2050 M.979-574-5699 http://www.ezuce.com
_______________________________________________ sipx-dev mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-dev/
