The latest version doesn't relay to other sip servers is authentication is not enabled. So practically a default kamailio installation can be used to call only between users that register to that instance. I think is fair enough from security vs easy-to-start balance.
User authentication is not enabled because depends on a database backend, and that is a choice of people installing it. Maybe we can add an installation wizard somewhere (maybe in kamcli) that can be run and allows users to select some of the options inactive (the defined feature) in the default configuration file and updates the kamailio.cfg to enable them (add the corresponding #!define tokens). And again, if someone here has ideas about what we should add in the default config file, security related or something else, just propose here. Cheers, Daniel On 13.12.18 18:46, Sergiu Pojoga wrote: > I see, then it's false alarm. Just wanted to make sure my favorite OS > doesn't loose security merit points because of a potential flaw in one > of its packages. > > Cheers, > --Sergiu > > On Thu, Dec 13, 2018 at 2:46 AM Daniel-Constantin Mierla > <[email protected] <mailto:[email protected]>> wrote: > > That is the default configuration file, allowing to register and > make calls between users. > > Kamailio by default (with empty routing block) doesn't do > anything. So it doesn't route out the request, nor sends a reply. > > It is like this from the early phase of SIP Express Router, if > people feel to change it in some way, just propose here for > discussions. > > Cheers, > Daniel > > On 12.12.18 22:35, Sergiu Pojoga wrote: >> Did anyone notice that when installing Kamailio from FreeBSD >> package, by default, it accepts registration with whatever >> account credentials? >> >> Not sure if it's like that with other OS packages (usually I >> install it from source), but this behavior kind of doesn't go >> with the popular saying that Kamailio by default "does nothing", lol. >> >> Regards, >> --Sergiu >> >> _______________________________________________ >> Kamailio (SER) - Users Mailing List >> [email protected] <mailto:[email protected]> >> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users > > -- > Daniel-Constantin Mierla -- www.asipto.com <http://www.asipto.com> > www.twitter.com/miconda <http://www.twitter.com/miconda> -- > www.linkedin.com/in/miconda <http://www.linkedin.com/in/miconda> > Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com > <http://www.kamailioworld.com> > Kamailio Advanced Training -- www.asipto.com <http://www.asipto.com> > > > _______________________________________________ > Kamailio (SER) - Users Mailing List > [email protected] > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users -- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 6-8, 2019 -- www.kamailioworld.com Kamailio Advanced Training -- www.asipto.com
_______________________________________________ Kamailio (SER) - Users Mailing List [email protected] https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
