Hi

In default opensips.cfg there is following line:

if (!db_check_from()) {
   send_reply("403", "Forbidden Auth ID");
   exit;
}

Beside that I authenticate all calls by using proxy_authorize function

The problem is that some buggy/cheap ATA's can't be configured to use user
in From field to be identical with authentication username and it results
403 error for them.
Unfortunately I can't tell my customers to replace their buggy ATA's

So, is it safe to disable db_check_from when proxy_authorize is in place?

Does it pose any security problems?

Best Regards
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to