Re[2]: shutdown

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Hello Rafat,

Tuesday, July 20, 2004, 11:51:46 AM, you wrote:

I think there is much more interesting futures that can be done. I
have a doubt that this future is needed.

RS> I mean to say to further apply restriction to IPs which are allowed in
RS> status section.
RS> 127.0.0.1=allow
RS> 192.168.0.214=allow
RS> shutdown=127.0.0.1

RS> it means shutdown is only allowed to 127.0.0.1
RS> 192.168.0.214 can access telnet but cant shutdown.
RS> other than these two IPs no one is allowed to access telnet
RS> To tightened security of GK.
RS> ----- Original Message ----- 
RS> From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx>
RS> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx>
RS> Sent: Tuesday, July 20, 2004 12:12 PM
RS> Subject: Re:  shutdown


>> Think twice:
>> 1. If Shutdown=1 and you are, let's say, from 127.0.0.2, then you cannot
>>     telnet into the status interface. This implies you cannot type the
RS> shutdown
>>     command, no matter of Shutdown setting.
>> 2. As a consequence of 1. Shutdown applies only to status interface
RS> clients
>>     that are allowed to access the status interface. You can either forbin
RS> or allow
>>    shutdown through the status interface.
>>
>> ----- Original Message ----- 
>> From: "Rafat Subhan" <rafat@xxxxxxxxxxxxxxx>
>> Sent: Tuesday, July 20, 2004 7:01 AM
>>
>>
>> In GKStatus is there any possibility of having feature like this....
>> [GKStaus::Auth]
>> rule=explicit
>> 127.0.0.1=allow
>> shutdown=forbid
>>
>> Then it forbids also 127.0.0.1 to shutdown...?
>> I think 127.0.0.1 shud be allow to shutdown it.
>> Or can v have iprestriction on shutdown that only these IPs can shutdown
RS> the GK else not allowed.
>> This is a good feature isnt it?
>>
>>


-- 
Best regards,

~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,.
Mike Tkachuk,     ph:380-3433-47067
YES ISP,          fx:380-3433-47067
Valova 17,        mike|a|yes.net.ua  
Kolomyia,         www.yes.net.ua
Ukraine 78200     FWD: 66518 

            20.07.2004 
          ICQ# 57698805
   MSN: mike_tkachuk|a|hotmail.com
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,.



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux