If you have turned Radius authentication on, then every call will be sent to Radius server for authentication/authorisation. So, AcceptUnregisteredCalls=1 + Radius is a good idea. On Tuesday 08 June 2004 22:34, Derek Marcotte wrote: > Hi Everyone, > What are the security implications: > > <quote src="http://www.gnugk.org/h323manual.html";> > AcceptUnregisteredCalls=1 > Default: 0 > With this feature enabled, the gatekeeper will accept calls from > any unregistered endpoint. However, it raises security risks. Be > careful to use it. > </quote> > > What I can see are the following scenarios: > > If you have CallUnregisteredEndpoints, someone will likely be > able to use the GK to anonymize their calls... (If proxying is > enabled???) > > If you have a GW to the PSTN, they can call the PSTN on your dime > > Does anyone have any feedback on this? I think the manual is a > little lacking in what this means. > > Cheers, > Derek > (beware return address) > > AcceptUnregisteredCalls security > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: GNOME Foundation > Hackers Unite! GUADEC: The world's #1 Open Source Desktop Event. > GNOME Users and Developers European Conference, 28-30th June in Norway > http://2004/guadec.org > > _______________________________________________________ > > List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Homepage: http://www.gnugk.org/ -- Best regards, Teodor Georgiev Information Services Plc. Tel : +359 2 96562008 Mobile: +359 887 508989 ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
