One thing that came to my mind is that you can examine/change config settings through the status port. This way you can build some scripts to check/force particular settings. But maybe it is a better choice to allow users to call them internally for free and bill them as a single user (you still have your calling-station-id to distinguish particular sub-users) at the parent gatekeeper. This way your life is much, much easier. ----- Original Message ----- From: "Raschel" <raschel@xxxxxx> Sent: Thursday, January 20, 2005 2:56 PM > Dear Michal, > > thx for your answers. > > So if i get you right we can prevent the child gk to setup an prefix > (routing) with setting > AcceptGatewayPrefixes=0 at the parent gatekeeper.ini > but we have to look for another security solution to prevent customers to > alter the gatekeeper.ini at the child proxy gk for registration the > endpoints. Hmm thats really a security hole for us but anyway i hope we > will > find a solution. > > thx a lot > TOM > > ----- Original Message ----- > From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> > To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> > Sent: Thursday, January 20, 2005 1:28 PM > Subject: Re: child gk prefix and RRQ > > >> does this only interfere with a child / parent gateway situation or also >> with a neigborhood gk ? > > ? Neighbors do not perform any registration and you have full control over > them. > >> do you also have a solution for the RRQ forwarding ? (also configurable >> at >> the parent gk .ini file) > > No, it's not possible. You need to either authenticate endpoints at the > child > gatekeeper or accept the fact that you can authenticate only the child > gatekeeper > itself. > >> thx >> TOM >> >> ----- Original Message ----- >> From: "Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> >> To: <openh323gk-users@xxxxxxxxxxxxxxxxxxxxx> >> Sent: Thursday, January 20, 2005 12:29 PM >> Subject: Re: child gk prefix and RRQ >> >> >> AcceptGatewayPrefixes=0 in the parent gatekeeper config. >> >> ----- Original Message ----- >> From: "Raschel" <raschel@xxxxxx> >> Sent: Thursday, January 20, 2005 8:14 AM >> >> >>> i ´ve just setup a child gk and can easy circumvent the authorisation >>> mechanism of the parent gk by setting up a number as i like e.g. 0815 >>> (endpoint) and set a prefix to this number. >>> So it´s easy to register this number without authorisation and place or >>> receive a call. >>> For unattendend proxy server this is not a glorious. >>> To prevent the child gk setting up a prefix i guess there is a option at >>> the >>> gatekeeper.ini but i found nothing to force the child gk sending the RRQ >>> to >>> the parent gk (except i make a setup at the child gk, which is easy to >>> circumvent) >>> >>> any idea? please help. >>> >>> big thx >>> TOM ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________________ List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_id?49 Homepage: http://www.gnugk.org/
