Hello Rafat, Tuesday, July 20, 2004, 11:51:46 AM, you wrote: I think there is much more interesting futures that can be done. I have a doubt that this future is needed. RS> I mean to say to further apply restriction to IPs which are allowed in RS> status section. RS> 127.0.0.1=allow RS> 192.168.0.214=allow RS> shutdown=127.0.0.1 RS> it means shutdown is only allowed to 127.0.0.1 RS> 192.168.0.214 can access telnet but cant shutdown. RS> other than these two IPs no one is allowed to access telnet RS> To tightened security of GK. RS> ----- Original Message ----- RS> From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> RS> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> RS> Sent: Tuesday, July 20, 2004 12:12 PM RS> Subject: Re: shutdown >> Think twice: >> 1. If Shutdown=1 and you are, let's say, from 127.0.0.2, then you cannot >> telnet into the status interface. This implies you cannot type the RS> shutdown >> command, no matter of Shutdown setting. >> 2. As a consequence of 1. Shutdown applies only to status interface RS> clients >> that are allowed to access the status interface. You can either forbin RS> or allow >> shutdown through the status interface. >> >> ----- Original Message ----- >> From: "Rafat Subhan" <rafat@xxxxxxxxxxxxxxx> >> Sent: Tuesday, July 20, 2004 7:01 AM >> >> >> In GKStatus is there any possibility of having feature like this.... >> [GKStaus::Auth] >> rule=explicit >> 127.0.0.1=allow >> shutdown=forbid >> >> Then it forbids also 127.0.0.1 to shutdown...? >> I think 127.0.0.1 shud be allow to shutdown it. >> Or can v have iprestriction on shutdown that only these IPs can shutdown RS> the GK else not allowed. >> This is a good feature isnt it? >> >> -- Best regards, ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,. Mike Tkachuk, ph:380-3433-47067 YES ISP, fx:380-3433-47067 Valova 17, mike|a|yes.net.ua Kolomyia, www.yes.net.ua Ukraine 78200 FWD: 66518 20.07.2004 ICQ# 57698805 MSN: mike_tkachuk|a|hotmail.com ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/