Dear Michal, thx for your answers. So if i get you right we can prevent the child gk to setup an prefix (routing) with setting AcceptGatewayPrefixes=0 at the parent gatekeeper.ini but we have to look for another security solution to prevent customers to alter the gatekeeper.ini at the child proxy gk for registration the endpoints. Hmm thats really a security hole for us but anyway i hope we will find a solution. thx a lot TOM ----- Original Message ----- From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Thursday, January 20, 2005 1:28 PM Subject: Re: child gk prefix and RRQ > does this only interfere with a child / parent gateway situation or also > with a neigborhood gk ? ? Neighbors do not perform any registration and you have full control over them. > do you also have a solution for the RRQ forwarding ? (also configurable at > the parent gk .ini file) No, it's not possible. You need to either authenticate endpoints at the child gatekeeper or accept the fact that you can authenticate only the child gatekeeper itself. > thx > TOM > > ----- Original Message ----- > From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> > To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> > Sent: Thursday, January 20, 2005 12:29 PM > Subject: Re: child gk prefix and RRQ > > > AcceptGatewayPrefixes=0 in the parent gatekeeper config. > > ----- Original Message ----- > From: "Raschel" <raschel@xxxxxx> > Sent: Thursday, January 20, 2005 8:14 AM > > >> i ´ve just setup a child gk and can easy circumvent the authorisation >> mechanism of the parent gk by setting up a number as i like e.g. 0815 >> (endpoint) and set a prefix to this number. >> So it´s easy to register this number without authorisation and place or >> receive a call. >> For unattendend proxy server this is not a glorious. >> To prevent the child gk setting up a prefix i guess there is a option at >> the >> gatekeeper.ini but i found nothing to force the child gk sending the RRQ >> to >> the parent gk (except i make a setup at the child gk, which is easy to >> circumvent) >> >> any idea? please help. >> >> big thx >> TOM ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id.49 Homepage: http://www.gnugk.org/ ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
