Hmm, ok try to do may best to explain (maybe a little language barrier, sorry i am not a native speaker) We have parent GK which doing a RRQ against a SQL Database and no client can register without being properly setup before. Thats OK so far and works well. Now we have also several client GK as (simple proxy) at the customer Side which are unattended. The only work for the proxy should be to route the call to the clients behind a NAT Router. The Proxy register at the parent GK with a predefined No. against the Database and only can register if he is allowed too. Thats OK and works well too. Here come the problem. 1.) The child proxy gk, should not do Registration at his own nor there should be a database or a configuration option to do so, but he should be forced to send all RRQ to the parent GK. (Why? because i can not controll the unattended child proxy for manipulation at the gatekeeper.ini) 2.) To reach the clients behind the NATed child proxy GK i have to setup a route to the clients. I can do this with a prefix at the child GK but this should also not be allowed to. I only want to be able to set this route at the parent GK. (See above Statement) ----- Original Message ----- From: "Stewart Nelson" <sn@xxxxxxxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Thursday, January 20, 2005 10:53 AM Subject: Re: child gk prefix and RRQ Hi, I'm not sure I understand your question. If AcceptUnregisteredCalls is 0 on the parent GK, then the child must register before it can make or receive calls (unless it is listed as a permanent endpoint). But that is already in your configuration, so I don't know why you can call without RRQ. You should be seeing a "caller not registered" error. There are many authentication and authorization methods that you can use to restrict calling. --Stewart ----- Original Message ----- From: "Raschel" <raschel@xxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Thursday, January 20, 2005 8:14 AM Subject: child gk prefix and RRQ Hi, i ´ve just setup a child gk and can easy circumvent the authorisation mechanism of the parent gk by setting up a number as i like e.g. 0815 (endpoint) and set a prefix to this number. So it´s easy to register this number without authorisation and place or receive a call. For unattendend proxy server this is not a glorious. To prevent the child gk setting up a prefix i guess there is a option at the gatekeeper.ini but i found nothing to force the child gk sending the RRQ to the parent gk (except i make a setup at the child gk, which is easy to circumvent) any idea? please help. big thx TOM ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/ ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
